CVE-2020-7491 **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is vis
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2020-7491?
CVE-2020-7491 is a high-severity vulnerability in Tricon system versions 10.2.0 through 10.5.3, published on 23 Jul 2020.
Official description
**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.
Which versions are affected by CVE-2020-7491?
It affects 7 products.
Products include Schneider-Electric Tricon Tcm 4351 Firmware, Schneider-Electric Tricon Tcm 4351a Firmware, Schneider-Electric Tricon Tcm 4351b Firmware, Schneider-Electric Tricon Tcm 4352 Firmware, Schneider-Electric Tricon Tcm 4352a Firmware, Schneider-Electric Tricon Tcm 4352b Firmware and 1 more.
How do I fix CVE-2020-7491?
No fix has been published for CVE-2020-7491 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-7491 being exploited?
There is no known exploitation of CVE-2020-7491 in the wild and no public exploit code.
Other vulnerabilities in Tricon system versions 10.2.0 through 10.5.3
Sources
Also known as GHSA-6q95-r497-79jw.