What’s Vulnerable › Vulnerabilities

CVE-2020-7486

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-16 · updated 2026-06-17
• Weakness: CWE-400

Description

**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in system v10.3.x. This vulnerability was discovered and remediated in version v10.5.x on August 13, 2009. TCMs from v10.5.x and on will no longer exhibit this behavior.

Affected products

• Schneider-Electric Tricon Tcm 4351 Firmware: 10.3.x, 10.4.x
• Schneider-Electric Tricon Tcm 4351A Firmware: 10.3.x, 10.4.x
• Schneider-Electric Tricon Tcm 4351B Firmware: 10.3.x, 10.4.x
• Schneider-Electric Tricon Tcm 4352 Firmware: 10.3.x, 10.4.x
• Schneider-Electric Tricon Tcm 4352A Firmware: 10.3.x, 10.4.x
• Schneider-Electric Tricon Tcm 4352B Firmware: 10.3.x, 10.4.x

References

• https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
• https://www.se.com/ww/en/download/document/SESB-2020-105-01
• https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
• https://www.se.com/ww/en/download/document/SESB-2020-105-01

Get alerted when CVE-2020-7486 or the next vulnerability affects your stack