Vulnerability Details : CVE-2021-22745
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22746, and CVE-2021-22747.
Products affected by CVE-2021-22745
- Schneider-electric » Triconex Model 3009 Mp FirmwareVersions from including (>=) 11.3.0 and before (<) 11.8.0cpe:2.3:o:schneider-electric:triconex_model_3009_mp_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:tcm_4351b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:schneider-electric:tcm_4351b_firmware:11.7.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-22745
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 14 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-22745
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST | |
|
3.9
|
LOW | CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
0.3
|
3.6
|
NIST |
CWE ids for CVE-2021-22745
-
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.Assigned by: cybersecurity@se.com (Primary)
References for CVE-2021-22745
Jump to