1. Home
  2. CVE Database
  3. CVE-2020-7485
CRITICAL · 9.8

CVE-2020-7485

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in...

Vulnerability Description

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricTristation 1131>= 1.0.0, <= 4.9.0
MicrosoftWindows 7-
MicrosoftWindows Nt-
MicrosoftWindows Xp-

References

FAQ

What is CVE-2020-7485?

CVE-2020-7485 is a vulnerability with a CVSS score of 9.8 (CRITICAL). **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in...

How severe is CVE-2020-7485?

CVE-2020-7485 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-7485?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Tristation 1131, Microsoft Windows 7, Microsoft Windows Nt, Microsoft Windows Xp.