**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper access to the TriStation host machine. This was addressed in TriStation version v4.9.1 and v4.10.1 released on May 30, 2013.1
**VERSIÓN NO COMPATIBLE CUANDO SE ASIGNÓ** Una cuenta de soporte heredada en la versión v4.9.0 y anteriores del software TriStation podría causar un acceso inapropiado a la máquina host de TriStation. Esto fue abordado en TriStation versiones v4.9.1 y v4.10.1 publicadas en May 30, 2013.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| schneider-electric | tristation_1131 | * | <built-in method update of dict object at 0x7e60e846c600> | Application |
| schneider-electric | tristation_1131 | 4.10.0 | <built-in method update of dict object at 0x7e60e846ff00> | Application |
| schneider-electric | tristation_1131 | 4.12.0 | <built-in method update of dict object at 0x7e60eb2268c0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:schneider-electric:tristation_1131:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:tristation_1131:4.10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:schneider-electric:tristation_1131:4.12.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:* |
| No | cpe:2.3:o:microsoft:windows_nt:-:*:*:*:*:*:*:* |
| No | cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:* |