CVE-2021-22744
First published: Wed May 26 2021(Updated: )
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22745, CVE-2021-22746, and CVE-2021-22747.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider Electric Triconex Model 3009 MP | >=11.3.0<11.8.0 | |
| Schneider Electric Triconex Model 3009 MP | ||
| Schneider-electric Tricon Tcm 4351b Firmware | >=11.3.0<11.5.1 | |
| Schneider-electric Tricon Tcm 4351b Firmware | =11.7.0 | |
| Schneider-electric Tricon Tcm 4351b Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2021-22744?
CVE-2021-22744 has a medium severity rating due to the potential for module resets in affected systems.
How do I fix CVE-2021-22744?
To mitigate CVE-2021-22744, update the firmware of the affected Triconex Model 3009 MP and TCM 4351B systems to a version beyond the vulnerable range.
What systems are affected by CVE-2021-22744?
CVE-2021-22744 affects Triconex Model 3009 MP and TCM 4351B systems running specific firmware versions between 11.3.0 and 11.8.0.
What kind of vulnerability is CVE-2021-22744?
CVE-2021-22744 is classified as an improper check for unusual or exceptional conditions vulnerability.
What might happen if CVE-2021-22744 is exploited?
If exploited, CVE-2021-22744 could lead to module resets in systems when they receive malformed TriStation packets.
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/schneider electric triconex model 3009 mp
- version/schneider electric triconex model 3009 mp/11.3.0
- canonical/schneider-electric tricon tcm 4351b firmware
- version/schneider-electric tricon tcm 4351b firmware/11.3.0
- version/schneider-electric tricon tcm 4351b firmware/11.7.0