NetSight
critical9.8

CVE-2021-30064

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can su…

Impact

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state).

Affected products

VendorProductAffected versions
BeldenTofino Xenon Security Appliance Firmware
before 03.2.03
BeldenTofino Argon Fa-Tsa-220-Tx\/Mm Firmware
All versions
BeldenTofino Argon Fa-Tsa-220-Tx\/Tx Firmware
All versions
BeldenTofino Argon Fa-Tsa-220-Mm\/Tx Firmware
All versions
BeldenTofino Argon Fa-Tsa-220-Mm\/Mm Firmware
All versions
BeldenTofino Argon Fa-Tsa-100-Tx\/Tx Firmware
All versions
BeldenEagle 20 Tofino 943 987-505-Mm\/Mm Firmware
All versions
BeldenEagle 20 Tofino 943 987-504-Mm\/Tx Firmware
All versions
BeldenEagle 20 Tofino 943 987-502 -Tx\/Mm Firmware
All versions
BeldenEagle 20 Tofino 943 987-501-Tx\/Tx Firmware
All versions
Schneider-ElectricTcsefea23f3f20 Firmware
All versions
Schneider-ElectricTcsefea23f3f21 Firmware
All versions

Weakness classification

References