First published: Wed May 26 2021(Updated: )
Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22746, and CVE-2021-22747.
Credit: cybersecurity@se.com
Affected Software | Affected Version | How to fix |
---|---|---|
Schneider-electric Triconex Model 3009 Mp Firmware | >=11.3.0<11.8.0 | |
Schneider-electric Triconex Model 3009 Mp | ||
Schneider-electric Tcm 4351b Firmware | >=11.3.0<11.5.1 | |
Schneider-electric Tcm 4351b Firmware | =11.7.0 | |
Schneider-electric Tcm 4351b |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-22745 has a high severity rating due to the potential for module reset from malformed TriStation packets.
To fix CVE-2021-22745, update the Triconex Model 3009 MP firmware to a version above 11.8.0.
CVE-2021-22745 affects Triconex Model 3009 MP systems running firmware versions between 11.3.0 and 11.8.0.
The impact of CVE-2021-22745 includes potential module resets when the write-protect keyswitch is in the program position.
Yes, CVE-2021-22745 specifically targets Triconex Model 3009 MP firmware versions 11.3.0 to 11.8.0.