vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2020-7491

HIGH
7.5
CVSS Score
Published: July 23, 2020 at 08:46 PM UTC
Updated: June 17, 2026 at 03:24 AM UTC
15 products affected across 1 vendorTricon Tcm 4351A FirmwareTricon Tcm 4352B FirmwareTricon Tcm 4352 Firmware

Using Tricon system versions 10.2.0 through 10.5.3 by N/A?

Get instant alerts when new vulnerabilities affect Tricon system versions 10.2.0 through 10.5.3 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 1%

Description

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Tricon Tcm 4351 Firmware· Schneider Electric
95%
10.2.0 ≤ v < 10.5.4
Affected range stops below 10.5.4, so it looks safe — our inference, not a vendor statement
schneider-electric-tricon-tcm-4351 (same device)
Tricon Tcm 4351A Firmware· Schneider Electric
95%
10.2.0 ≤ v < 10.5.4
Affected range stops below 10.5.4, so it looks safe — our inference, not a vendor statement
schneider-electric-tricon-tcm-4351a (same device)
Tricon Tcm 4351B Firmware· Schneider Electric
95%
10.2.0 ≤ v < 10.5.4
Affected range stops below 10.5.4, so it looks safe — our inference, not a vendor statement
schneider-electric-tricon-tcm-4351b (same device)
Tricon Tcm 4352 Firmware· Schneider Electric
95%
10.2.0 ≤ v < 10.5.4
Affected range stops below 10.5.4, so it looks safe — our inference, not a vendor statement
schneider-electric-tricon-tcm-4352 (same device)
Tricon Tcm 4352A Firmware· Schneider Electric
95%
10.2.0 ≤ v < 10.5.4
Affected range stops below 10.5.4, so it looks safe — our inference, not a vendor statement
schneider-electric-tricon-tcm-4352a (same device)
Tricon Tcm 4352B Firmware· Schneider Electric
95%
10.2.0 ≤ v < 10.5.4
Affected range stops below 10.5.4, so it looks safe — our inference, not a vendor statement
schneider-electric-tricon-tcm-4352b (same device)
Tristation 1131 Firmware· Schneider Electric
95%
1.0.0 ≤ v ≤ 4.9.04.10.0 ≤ v ≤ 4.12.0
schneider-electric-tristation-1131 (same device)
Tricon· Schneider Electric
60%
All versions
Tricon TCM 4351· Schneider Electricdevice
80%
All versions
Tricon TCM 4351A· Schneider Electricdevice
80%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
x_refsource_MISCVendor Advisory
Source: [email protected]
https://www.se.com/ww/en/download/document/SESB-2020-105-01/

CVSS

7.5HIGH[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card