Schneider Electric Tristation 1131 vulnerabilities

3 CVEs affecting Schneider Electric Tristation 1131, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7485, published 2020-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-7485, published 2020-04-16. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed…
CVE-2020-7484, published 2020-04-16. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of service attack if the user is not following documented guidelines pertaining to…
CVE-2020-7483, published 2020-04-16. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. **VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on the network when the 'password' feature is enabled. This vulnerability was discovered in and…