{"id":"CVE-2020-7485","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-7485","generatedAt":"2026-10-27T23:27:14.741Z","title":"**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine.","description":"**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1","published":"2020-04-16T19:15:35.000Z","lastModified":"2026-06-17T03:24:52.000Z","status":"Modified","sourceIdentifier":"cybersecurity@se.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["schneider-electric/tristation 1131"],"epss":{"score":0.01859,"percentile":0.7907,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.86%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01","tags":["Third Party Advisory","US Government Resource"],"source":"cybersecurity@se.com"},{"url":"https://www.se.com/ww/en/download/document/SESB-2020-105-01","tags":["Vendor Advisory"],"source":"cybersecurity@se.com"},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.se.com/ww/en/download/document/SESB-2020-105-01","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7485","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}