CVE-2021-30065

3 documents3 sources
Severity
7.5HIGH
EPSS
0.0%
top 91.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 3
Latest updateApr 5

Description

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

🔴Vulnerability Details

2
GHSA
GHSA-264c-27mg-g32w: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 032022-04-05
CVEList
CVE-2021-30065: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 032022-04-03
CVE-2021-30065 (HIGH CVSS 7.5) | On Schneider Electric ConneXium Tof | cvebase.io