Schneider-Electric Tristation 1131 vulnerabilities

3 known vulnerabilities affecting schneider-electric/tristation_1131.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH2

Vulnerabilities

Page 1 of 1

CVE-2020-7485CRITICALCVSS 9.8≥ 1.0.0, ≤ 4.9.0v4.10.0+1 more2020-04-16

CVE-2020-7485 [CRITICAL] CVE-2020-7485: **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1

CVE-2020-7484HIGHCVSS 7.5≥ 1.0, < 4.13.02020-04-16

CVE-2020-7484 [HIGH] CVE-2020-7484: **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could all **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of service attack if the user is not following documented guidelines pertaining to dedicated TriStation connection and key-switch protection. This vulnerability was discovered and remediated in versions v4.9.1 and v4.10.1 on May 30, 2013. This feature

CVE-2020-7483HIGHCVSS 7.5≥ 1.0, ≤ 4.12.02020-04-16

CVE-2020-7483 [HIGH] CWE-319 CVE-2020-7483: **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on th **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on the network when the 'password' feature is enabled. This vulnerability was discovered in and remediated in versions v4.9.1 and v4.10.1 on May 30, 2013. The 'password' feature is an additional optional check performed by TS1131 that it is connected to a spec