CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2020-7491
High (7.5) in schneider-electric. EPSS 1.3% chance of exploitation in the next 30 days.
A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:tricon_tcm_4351_firmware
- schneider-electric:tricon_tcm_4351a_firmware
- schneider-electric:tricon_tcm_4351b_firmware
- schneider-electric:tricon_tcm_4352_firmware
- schneider-electric:tricon_tcm_4352a_firmware
- schneider-electric:tricon_tcm_4352b_firmware
- schneider-electric:tristation_1131_firmware