CVE-2020-7486

Estado: ModificadaAlta (7.5)—

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Puntuación base: 7.5

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 1.64%
Percentil entre todas las CVEs puntuadas: 76
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Schneider-electric — Tricon TCM 4351 Firmware Schneider-electric — Tricon TCM 4351a Firmware Schneider-electric — Tricon TCM 4351b Firmware Schneider-electric — Tricon TCM 4352 Firmware Schneider-electric — Tricon TCM 4352a Firmware Schneider-electric — Tricon TCM 4352b Firmware

CWE

CWE-400

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2020-7486",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cybersecurity@se.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Tricon TCM Model 4351, 4352, 4351A/B, 4352A/B (v10.3.x, v10.4.x)",
          "versions": [
            {
              "status": "affected",
              "version": "Tricon TCM Model 4351, 4352, 4351A/B, 4352A/B (v10.3.x, v10.4.x)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-04-16T19:15:34.823",
  "references": [
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cybersecurity@se.com"
    },
    {
      "url": "https://www.se.com/ww/en/download/document/SESB-2020-105-01",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cybersecurity@se.com"
    },
    {
      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.se.com/ww/en/download/document/SESB-2020-105-01",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior."
    },
    {
      "lang": "es",
      "value": "**VERSIÓN NO COMPATIBLE CUANDO SE ASIGNÓ** Una vulnerabilidad podría causar que los módulos TCM se restablezcan cuando se encuentren bajo una alta carga de red en TCM versión v10.4.x y en el system versión v10.3.x. Esta vulnerabilidad fue descubierta y corregida en la versión v10.5.x el 13 de agosto de 2009. Los TCM a partir de la versión v10.5.x ya no mostrarán este comportamiento."
    }
  ],
  "lastModified": "2026-06-17T03:24:52.517",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351_firmware:10.3.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E790DC73-7F6F-452B-8B96-FCCD754518EB"
            },
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351_firmware:10.4.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4D61671-CD0D-40FF-BD87-A093C765E8DE"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4351:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CA997CF-D574-4D1B-B71F-A0EBB31303DA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352_firmware:10.3.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57A739ED-A179-414E-B42A-34B68DC2A2B0"
            },
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352_firmware:10.4.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BC76821-5EF5-42E9-9456-5BE68A82C807"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4352:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1A965FF8-A474-447E-84AE-ED902B47A3A3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351a_firmware:10.3.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A031568A-CFD6-4C08-AFF6-4B98C886DC6B"
            },
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351a_firmware:10.4.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "274D41C5-B915-4B51-9285-0B669A7BA9A7"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4351a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4D4D6502-A5D3-44A9-AF07-6717EADB98D0"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351b_firmware:10.3.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99273E70-3A45-4BB1-88E6-B18E978A843E"
            },
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4351b_firmware:10.4.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63480CBF-C64A-40A4-B516-73F916192849"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4351b:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4A46632D-151C-43D3-BFA3-72C87304AB8B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352a_firmware:10.3.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "278D4E5E-8AE5-455E-96AA-600B3014E784"
            },
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352a_firmware:10.4.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C5124C7-B4FF-429C-B5CD-C733617C7F12"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4352a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D4836B8C-1BEC-4076-928D-CBB403836BF2"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352b_firmware:10.3.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A1C7148-99BB-41CE-A8C5-73ECE290FDBD"
            },
            {
              "criteria": "cpe:2.3:o:schneider-electric:tricon_tcm_4352b_firmware:10.4.x:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "165FCAD0-AB79-4693-8C88-167C2941E887"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:schneider-electric:tricon_tcm_4352b:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "89D4DE85-CC63-415C-9C07-8DE9C762AF3B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cybersecurity@se.com"
}