CVE-2020-7486

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-04-2020 09:15

Last modified: - 03-02-2022 03:24

Total changes: - 3

Description

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

AND

vendor=schneider-electric AND product=tricon_tcm_4351_firmware AND version=10.3.x

vendor=schneider-electric AND product=tricon_tcm_4351_firmware AND version=10.4.x

vendor=schneider-electric AND product=tricon_tcm_4351 AND version=-

AND

vendor=schneider-electric AND product=tricon_tcm_4352_firmware AND version=10.3.x

vendor=schneider-electric AND product=tricon_tcm_4352_firmware AND version=10.4.x

vendor=schneider-electric AND product=tricon_tcm_4352 AND version=-

AND

vendor=schneider-electric AND product=tricon_tcm_4351a_firmware AND version=10.3.x

vendor=schneider-electric AND product=tricon_tcm_4351a_firmware AND version=10.4.x

vendor=schneider-electric AND product=tricon_tcm_4351a AND version=-

AND

vendor=schneider-electric AND product=tricon_tcm_4351b_firmware AND version=10.3.x

vendor=schneider-electric AND product=tricon_tcm_4351b_firmware AND version=10.4.x

vendor=schneider-electric AND product=tricon_tcm_4351b AND version=-

AND

vendor=schneider-electric AND product=tricon_tcm_4352a_firmware AND version=10.3.x

vendor=schneider-electric AND product=tricon_tcm_4352a_firmware AND version=10.4.x

vendor=schneider-electric AND product=tricon_tcm_4352a AND version=-

AND

vendor=schneider-electric AND product=tricon_tcm_4352b_firmware AND version=10.3.x

vendor=schneider-electric AND product=tricon_tcm_4352b_firmware AND version=10.4.x

vendor=schneider-electric AND product=tricon_tcm_4352b AND version=-

Reference

Keywords

CVE-2020-7486

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-7486

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures