CVE-2020-7485

published 2020-04-16

CVE-2020-7485: **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the…

Priority P3 50 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1

Affected

3 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	tristation_1131	—	—
schneider-electric	tristation_1131	—	—
schneider-electric	tristation_1131	1.0.0 – 4.9.0	—

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.