PT-2023-16600 · General Electric · General Electric Micom S1 Agile

Anooja Joy + 3 · CVE-2023-0898 · Published 2023-11-07 · Updated 2023-11-14

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions General Electric MiCOM S1 Agile (affected versions not specified)

Description The issue allows an attacker to achieve code execution by placing malicious DLL files in the application's directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-0898

Affected Products

General Electric Micom S1 Agile

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-0898 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-311-23 · Note
• https://twitter.com/Dr_Faruk_Kazi/status/1722130468273803268 · Twitter Post