CVE:CVE-2020-7491
CNNVD:CNNVD-202007-1410
Schneider Electric Tricon TCM Model 4351等都是法国施耐德电气（Schneider Electric）公司的一款通信模块。
Schneider Electric Tricon TCM Model中存在安全漏洞，该漏洞源于程序的旧版调试端口帐户在网络上可见。攻击者可利用该漏洞进行不正当访问。以下产品及版本受到影响：Schneider Electric Tricon TCM Model 4351（安装在Tricon v10.0版本至v10.5.3版本）；4352（安装在Tricon v10.0版本至v10.5.3版本）；4351A/B（安装在Tricon v10.0版本至v10.5.3版本）；4352A/B（安装在Tricon v10.0版本至v10.5.3版本）。
solution:Upgrade schneider-electric tricon_tcm_4351_firmware to a higher version than 10.5.4,and avoid the version [10.2.0,10.5.4); Upgrade schneider-electric tricon_tcm_4352_firmware to a higher version than 10.5.4,and avoid the version [10.2.0,10.5.4); Upgrade schneider-electric tricon_tcm_4351a_firmware to a higher version than 10.5.4,and avoid the version [10.2.0,10.5.4); Upgrade schneider-electric tricon_tcm_4351b_firmware to a higher version than 10.5.4,and avoid the version [10.2.0,10.5.4); Upgrade schneider-electric tricon_tcm_4352a_firmware to a higher version than 10.5.4,and avoid the version [10.2.0,10.5.4); Upgrade schneider-electric tricon_tcm_4352b_firmware to a higher version than 10.5.4,and avoid the version [10.2.0,10.5.4); Upgrade schneider-electric tristation_1131_firmware to a higher version than 4.9.0,4.12.0,and avoid the version [1.0.0,4.9.0],[4.10.0,4.12.0]