[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMvSZVFd3dRmiJ9gcjRciNisPFt19aR_lv_sQTTzUh7A":3,"g5a-ex:belden\u002Ftofino_xenon_security_appliance_firmware@*":88,"g5a-family:belden\u002Ftofino_xenon_security_appliance_firmware":90},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":65,"seoMetadata":66,"meta":85},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"belden","tofino_xenon_security_appliance_firmware",1,9,0,"2022-04-03",[14],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",false,"Tofino Xenon Security Appliance Firmware by Belden is a technology product with 1 tracked version and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},[21,29,33,40,44,48,51,57,61],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2017-11402","An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the firewall. The attack methodology is a crafted OPC dynamic port shift.","2017-11-20",9.8,"v3.0","Critical",0.01545,{"cveId":30,"description":31,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":32},"CVE-2017-11401","An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed\u002Fcrafted packets to a protected asset, bypassing function code filtering.",0.01397,{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":16,"epssScore":39},"CVE-2021-30063","On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service.",7.5,"v3.1","High",0.00999,{"cveId":41,"description":42,"publishedDate":12,"cvssScore":25,"cvssVersion":37,"severity":27,"isKev":16,"epssScore":43},"CVE-2021-30064","On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20\u002F21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state).",0.009,{"cveId":45,"description":46,"publishedDate":12,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":16,"epssScore":47},"CVE-2021-30065","On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20\u002F21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.",0.0088,{"cveId":49,"description":50,"publishedDate":12,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":16,"epssScore":47},"CVE-2021-30062","On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer.",{"cveId":52,"description":53,"publishedDate":12,"cvssScore":54,"cvssVersion":37,"severity":55,"isKev":16,"epssScore":56},"CVE-2021-30061","On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20\u002F21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can execute code via a crafted file on a USB stick.",6.8,"Medium",0.00412,{"cveId":58,"description":59,"publishedDate":24,"cvssScore":54,"cvssVersion":26,"severity":55,"isKev":16,"epssScore":60},"CVE-2017-11400","An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.",0.00273,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":54,"cvssVersion":37,"severity":55,"isKev":16,"epssScore":64},"CVE-2021-30066","On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20\u002F21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400.",0.00246,[],{"title":67,"metaDescription":68,"keywords":69,"structuredData":70},"Tofino Xenon Security Appliance Firmware by Belden - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tofino Xenon Security Appliance Firmware by Belden covering 1 version with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tofino Xenon Security Appliance Firmware vulnerabilities, Tofino Xenon Security Appliance Firmware security, Tofino Xenon Security Appliance Firmware CVE, Belden Tofino Xenon Security Appliance Firmware, Tofino Xenon Security Appliance Firmware threat intelligence, Belden security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":71,"@type":72,"name":73,"description":68,"url":74,"manufacturer":75,"applicationCategory":79,"softwareVersion":80,"mainEntity":81},"https:\u002F\u002Fschema.org","SoftwareApplication","Tofino Xenon Security Appliance Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fbelden\u002Ftofino_xenon_security_appliance_firmware",{"@type":76,"name":77,"url":78},"Organization","Belden","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fbelden","Security Software","1 versions tracked",{"@type":82,"name":83,"description":84,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Tofino Xenon Security Appliance Firmware Security Vulnerabilities","Security vulnerabilities affecting Tofino Xenon Security Appliance Firmware by Belden",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":86,"apiVersion":87},"2026-10-18T19:56:56.295Z","3.0",{"rows":89,"total":11,"capped":16,"failed":11},[],[]]