Vulnerability Details CVE-2020-7486
**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2020-7486
-
cpe:2.3:h:schneider-electric:tricon_tcm_4351:-
-
cpe:2.3:h:schneider-electric:tricon_tcm_4351a:-
-
cpe:2.3:h:schneider-electric:tricon_tcm_4351b:-
-
cpe:2.3:h:schneider-electric:tricon_tcm_4352:-
-
cpe:2.3:h:schneider-electric:tricon_tcm_4352a:-
-
cpe:2.3:h:schneider-electric:tricon_tcm_4352b:-
-
cpe:2.3:o:schneider-electric:tricon_tcm_4351_firmware:10.3.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4351_firmware:10.4.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4351a_firmware:10.3.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4351a_firmware:10.4.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4351b_firmware:10.3.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4351b_firmware:10.4.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4352_firmware:10.3.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4352_firmware:10.4.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4352a_firmware:10.3.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4352a_firmware:10.4.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4352b_firmware:10.3.x
-
cpe:2.3:o:schneider-electric:tricon_tcm_4352b_firmware:10.4.x