medium6.8
CVE-2021-30066
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmwa…
Impact
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belden | Tofino Xenon Security Appliance Firmware | before 03.2.03 |
| Belden | Tofino Argon Fa-Tsa-220-Tx\/Mm Firmware | All versions |
| Belden | Tofino Argon Fa-Tsa-220-Tx\/Tx Firmware | All versions |
| Belden | Tofino Argon Fa-Tsa-220-Mm\/Tx Firmware | All versions |
| Belden | Tofino Argon Fa-Tsa-220-Mm\/Mm Firmware | All versions |
| Belden | Tofino Argon Fa-Tsa-100-Tx\/Tx Firmware | All versions |
| Belden | Eagle 20 Tofino 943 987-505-Mm\/Mm Firmware | All versions |
| Belden | Eagle 20 Tofino 943 987-504-Mm\/Tx Firmware | All versions |
| Belden | Eagle 20 Tofino 943 987-502 -Tx\/Mm Firmware | All versions |
| Belden | Eagle 20 Tofino 943 987-501-Tx\/Tx Firmware | All versions |
| Schneider-Electric | Tcsefea23f3f20 Firmware | All versions |
| Schneider-Electric | Tcsefea23f3f21 Firmware | All versions |