Vulnerability · Published Jul 23, 2020 · Assigned by schneider
CVE-2020-7491
Unrated
In plain English
A security flaw in Tricon system versions 10.2.0 through 10.5.3. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).
Severity (CVSS )–Not rated
Exploit odds (30 days)1.3%top 29.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Tricon system versions 10.2.0 through 10.5.3 | Tricon system versions 10.2.0 through 10.5.3 |
References
- https://www.se.com/ww/en/download/document/SESB-2020-105-01/ x_refsource_MISC
- https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01 x_refsource_MISC