Paper/Archive/CVE-2020-7485

CVE-2020-7485

schneider — **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improp…

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 79.2.792 × 2015.8 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1

Affected

ProductAffectedFixed inSource

TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0)TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0)–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refse.com/ww/en/download/document/SESB-2020-105-01 refus-cert.cisa.gov/ics/advisories/icsa-20-205-01