Vulnerability in Microsoft Windows_7
CVE-2020-7485
**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1…
EPSS: 0.018 (76.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Microsoft Windows_7
- Microsoft Windows_nt
- Microsoft Windows_xp
- Schneider-electric Tristation_1131 — versions 4.10.0, 4.12.0
- N/a Tristation Ts1131 (V4.0.0 To V4.9.0, V4.10.0) — versions TriStation TS1131 (v4.0.0 to v4.9.0, v4.10.0)
References
- cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)
- cybersecurity@se.com (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-7485?
- CVE-2020-7485 is a critical-severity vulnerability in Microsoft Windows_7. CVSS score: 9.8/10. Published 2020-04-16.
- How severe is CVE-2020-7485?
- Critical severity. CVSS v3 base score is 9.8 out of 10.