PT-2013-3929 · Alstom Grid · Alstom Grid Micom S1 Studio+1

Publicado 2013-07-10 · Atualizado 2013-07-11 · CVE-2013-2786

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Alstom Grid MiCOM S1 Agile versions prior to 1.0.3 Alstom Grid MiCOM S1 Studio (affected versions not specified)

Description The issue is related to weak permissions for the MiCOM S1 %PROGRAMFILES% directory. This weakness allows local users to gain privileges via a Trojan horse executable file.

Recommendations For Alstom Grid MiCOM S1 Agile versions prior to 1.0.3, update to version 1.0.3 or later. For Alstom Grid MiCOM S1 Studio, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-2786

Produtos afetados

Alstom Grid Micom S1 Agile

Alstom Grid Micom S1 Studio

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-2786 · Nota de Segurança
• http://ics-cert.us-cert.gov/advisories/ICSA-13-184-01 · Nota