What’s Vulnerable › Vulnerabilities

CVE-2021-30062

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-03 · updated 2026-06-17

Description

On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer.

Affected products

• Belden Eagle 20 Tofino 943 987-501-Tx/Tx Firmware: all versions
• Belden Eagle 20 Tofino 943 987-502 -Tx/Mm Firmware: all versions
• Belden Eagle 20 Tofino 943 987-504-Mm/Tx Firmware: all versions
• Belden Eagle 20 Tofino 943 987-505-Mm/Mm Firmware: all versions
• Belden Tofino Argon Fa-Tsa-100-Tx/Tx Firmware: all versions
• Belden Tofino Argon Fa-Tsa-220-Mm/Mm Firmware: all versions
• Belden Tofino Argon Fa-Tsa-220-Mm/Tx Firmware: all versions
• Belden Tofino Argon Fa-Tsa-220-Tx/Mm Firmware: all versions
• Belden Tofino Argon Fa-Tsa-220-Tx/Tx Firmware: all versions
• Belden Tofino Xenon Security Appliance Firmware: before 03.2.03 — fixed in 03.2.03
• Schneider-Electric Tcsefm0000 Firmware: before 03.23 — fixed in 03.23

How to fix

Upgrade to a fixed version: Belden Tofino Xenon Security Appliance Firmware 03.2.03; Schneider-Electric Tcsefm0000 Firmware 03.23. Check the vendor advisory for mitigations.

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
• https://www.belden.com/support/security-assurance
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
• https://www.belden.com/support/security-assurance

Get alerted when CVE-2021-30062 or the next vulnerability affects your stack