PT-2023-16600 · General Electric · General Electric Micom S1 Agile

Anooja Joy + 3 · Publicado 2023-11-07 · Atualizado 2023-11-14 · CVE-2023-0898

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions General Electric MiCOM S1 Agile (affected versions not specified)

Description The issue allows an attacker to achieve code execution by placing malicious DLL files in the application's directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2023-0898

Produtos afetados

General Electric Micom S1 Agile

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-0898 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-23-311-23 · Nota
• https://twitter.com/Dr_Faruk_Kazi/status/1722130468273803268 · Publicação no Twitter