VDB-190187 · CVE-2021-30062 · SEVD-2022-011-05

Schneider Electric ConneXium Tofino OPCLSM OPC Enforcer Privilege Escalation

A vulnerability was found in Schneider Electric ConneXium Tofino OPCLSM (SCADA Software) (unknown version). It has been rated as problematic. This issue affects an unknown code of the component OPC Enforcer. Upgrading eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

0	19
1	18

Field

source_cve_assigned	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

Commit Conf

90%	26
50%	10
70%	1

Approve Conf

90%	26
80%	10
70%	1

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
12050142	01/15/2022	VulD...	cve_assigned	1617314400	cve.mitre.org	01/15/2022	accepted	70
12036765	01/12/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	01/12/2022	accepted	90
12036764	01/12/2022	VulD...	cvss3_meta_tempscore	4.8	see CVSS documentation	01/12/2022	accepted	90
12036763	01/12/2022	VulD...	cvss3_meta_basescore	5.0	see CVSS documentation	01/12/2022	accepted	90
12036762	01/12/2022	VulD...	cvss3_vuldb_tempscore	4.8	see CVSS documentation	01/12/2022	accepted	90
12036761	01/12/2022	VulD...	cvss3_vuldb_basescore	5.0	see CVSS documentation	01/12/2022	accepted	90
12036760	01/12/2022	VulD...	cvss2_vuldb_tempscore	4.0	see CVSS documentation	01/12/2022	accepted	90
12036759	01/12/2022	VulD...	cvss2_vuldb_basescore	4.6	see CVSS documentation	01/12/2022	accepted	90
12036758	01/12/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	01/12/2022	accepted	80
12036757	01/12/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/12/2022	accepted	80
12036756	01/12/2022	VulD...	cvss2_vuldb_au	S	derived from historical data	01/12/2022	accepted	80
12036755	01/12/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	01/12/2022	accepted	80
12036754	01/12/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	01/12/2022	accepted	80
12036753	01/12/2022	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12036752	01/12/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12036751	01/12/2022	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12036750	01/12/2022	VulD...	cvss2_vuldb_ac	H	derived from vuldb v3 vector	01/12/2022	accepted	80
12036749	01/12/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12036748	01/12/2022	VulD...	type	SCADA Software		01/12/2022	accepted	90
12036747	01/12/2022	VulD...	date	1641942000 (01/12/2022)		01/12/2022	accepted	90