CVEvulnerability
CVE-2020-7485
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-04-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1
Affected configurations
• schneider-electric tristation 1131 (>= 1.0.0 <= 4.9.0)
• schneider-electric tristation 1131 4.10.0
• schneider-electric tristation 1131 4.12.0
References
- https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01 Third Party Advisory, US Government Resource
- https://www.se.com/ww/en/download/document/SESB-2020-105-01 Vendor Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01 Third Party Advisory, US Government Resource
- https://www.se.com/ww/en/download/document/SESB-2020-105-01 Vendor Advisory