{"id":"CVE-2020-7491","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-7491","generatedAt":"2026-10-28T00:31:59.415Z","title":"**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access.","description":"**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4.","published":"2020-07-23T21:15:12.000Z","lastModified":"2026-06-17T03:24:53.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":[],"affected":["schneider-electric/tricon tcm 4351 firmware","schneider-electric/tricon tcm 4352 firmware","schneider-electric/tricon tcm 4351a firmware","schneider-electric/tricon tcm 4351b firmware","schneider-electric/tricon tcm 4352a firmware","schneider-electric/tricon tcm 4352b firmware","schneider-electric/tristation 1131 firmware"],"epss":{"score":0.01308,"percentile":0.70394,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01","tags":["Third Party Advisory","US Government Resource"],"source":"cybersecurity@se.com"},{"url":"https://www.se.com/ww/en/download/document/SESB-2020-105-01/","tags":["Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.se.com/ww/en/download/document/SESB-2020-105-01/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7491","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}