VDB-190190 · CVE-2021-30065 · SEVD-2022-011-05

Schneider Electric ConneXium Tofino Firewall ModBus Packet access control

A vulnerability, which was classified as critical, has been found in Schneider Electric ConneXium Tofino Firewall (SCADA Software) (affected version not known). Affected by this issue is an unknown function of the component ModBus Packet Handler. Upgrading eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	20
0	19

Field

source_cve_assigned	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1
vulnerability_cvss3_vuldb_tempscore	1

Commit Conf

90%	28
50%	10
70%	1

Approve Conf

90%	28
80%	10
70%	1

ID	Commited	User	Field	Change	Remarks	Accepted	Reason	C
12050145	01/15/2022	VulD...	cve_assigned	1617314400	cve.mitre.org	01/15/2022	accepted	70
12036879	01/12/2022	VulD...	price_0day	$0-$5k	see exploit price documentation	01/12/2022	accepted	90
12036878	01/12/2022	VulD...	cvss3_meta_tempscore	7.0	see CVSS documentation	01/12/2022	accepted	90
12036877	01/12/2022	VulD...	cvss3_meta_basescore	7.3	see CVSS documentation	01/12/2022	accepted	90
12036876	01/12/2022	VulD...	cvss3_vuldb_tempscore	7.0	see CVSS documentation	01/12/2022	accepted	90
12036875	01/12/2022	VulD...	cvss3_vuldb_basescore	7.3	see CVSS documentation	01/12/2022	accepted	90
12036874	01/12/2022	VulD...	cvss2_vuldb_tempscore	6.5	see CVSS documentation	01/12/2022	accepted	90
12036873	01/12/2022	VulD...	cvss2_vuldb_basescore	7.5	see CVSS documentation	01/12/2022	accepted	90
12036872	01/12/2022	VulD...	cvss3_vuldb_e	X	derived from historical data	01/12/2022	accepted	80
12036871	01/12/2022	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/12/2022	accepted	80
12036870	01/12/2022	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	01/12/2022	accepted	80
12036869	01/12/2022	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	01/12/2022	accepted	80
12036868	01/12/2022	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12036867	01/12/2022	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12036866	01/12/2022	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	01/12/2022	accepted	80
12036865	01/12/2022	VulD...	cvss2_vuldb_au	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12036864	01/12/2022	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	01/12/2022	accepted	80
12036863	01/12/2022	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	01/12/2022	accepted	80
12036862	01/12/2022	VulD...	type	SCADA Software		01/12/2022	accepted	90
12036861	01/12/2022	VulD...	date	1641942000 (01/12/2022)		01/12/2022	accepted	90