PT-2013-3929 · Alstom Grid · Alstom Grid Micom S1 Studio+1
Published
2013-07-10
·
Updated
2013-07-11
·
CVE-2013-2786
CVSS v2.0
6.6
Medium
| Vector | AV:L/AC:M/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Alstom Grid MiCOM S1 Agile versions prior to 1.0.3
Alstom Grid MiCOM S1 Studio (affected versions not specified)
Description
The issue is related to weak permissions for the MiCOM S1 %PROGRAMFILES% directory. This weakness allows local users to gain privileges via a Trojan horse executable file.
Recommendations
For Alstom Grid MiCOM S1 Agile versions prior to 1.0.3, update to version 1.0.3 or later.
For Alstom Grid MiCOM S1 Studio, at the moment, there is no information about a newer version that contains a fix for this issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alstom Grid Micom S1 Agile
Alstom Grid Micom S1 Studio