SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-22742

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in…

LOW 3.9EPSS 0.25%

Does this matter?

Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.

Description

Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position.

CVSS 3.1
3.9 LOWCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS
0.25% probability · 16th percentile
CISA KEV
Not listed
Weakness
CWE-754
Affected
schneider-electric/triconex model 3009 mp firmware · schneider-electric/tcm 4351b firmware
Source
cybersecurity@se.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.