CVE-2020-7485 - **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine

Back Back to CVE browser

CRITICAL

VERSION NOT SUPPORTED WHEN ASSIGNED A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine

Published Apr 15, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.86%

Description

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1

Affected products

Vendor n/a Product TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0) Default
n/a
- Version
  TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0)

n/a

Version	Status	Constraints
TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28610
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.se.com/ww/en/download/document/SESB-2020-105-01
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28610		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01		x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.se.com/ww/en/download/document/SESB-2020-105-01		x_refsource_MISCVendor Advisory