Vulnerability Details CVE-2021-30066
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.1%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 7.2
Products affected by CVE-2021-30066
-
cpe:2.3:h:belden:eagle_20_tofino_943_987-501-tx/tx:-
-
cpe:2.3:h:belden:eagle_20_tofino_943_987-502_-tx/mm:-
-
cpe:2.3:h:belden:eagle_20_tofino_943_987-504-mm/tx:-
-
cpe:2.3:h:belden:eagle_20_tofino_943_987-505-mm/mm:-
-
cpe:2.3:h:belden:tofino_argon_fa-tsa-100-tx/tx:-
-
cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm/mm:-
-
cpe:2.3:h:belden:tofino_argon_fa-tsa-220-mm/tx:-
-
cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx/mm:-
-
cpe:2.3:h:belden:tofino_argon_fa-tsa-220-tx/tx:-
-
cpe:2.3:h:belden:tofino_xenon_security_appliance:-
-
cpe:2.3:h:schneider-electric:tcsefea23f3f20:-
-
cpe:2.3:h:schneider-electric:tcsefea23f3f21:-
-
cpe:2.3:h:schneider-electric:tcsefea23f3f22:-
-
cpe:2.3:o:belden:eagle_20_tofino_943_987-501-tx/tx_firmware:-
-
cpe:2.3:o:belden:eagle_20_tofino_943_987-502_-tx/mm_firmware:-
-
cpe:2.3:o:belden:eagle_20_tofino_943_987-504-mm/tx_firmware:-
-
cpe:2.3:o:belden:eagle_20_tofino_943_987-505-mm/mm_firmware:-
-
cpe:2.3:o:belden:tofino_argon_fa-tsa-100-tx/tx_firmware:-
-
cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm/mm_firmware:-
-
cpe:2.3:o:belden:tofino_argon_fa-tsa-220-mm/tx_firmware:-
-
cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx/mm_firmware:-
-
cpe:2.3:o:belden:tofino_argon_fa-tsa-220-tx/tx_firmware:-
-
cpe:2.3:o:belden:tofino_xenon_security_appliance_firmware:3.1.0
-
cpe:2.3:o:schneider-electric:tcsefea23f3f20_firmware:-
-
cpe:2.3:o:schneider-electric:tcsefea23f3f21_firmware:-
-
cpe:2.3:o:schneider-electric:tcsefea23f3f22_firmware:-