PT-2013-3929

CVE-2013-2786

·

Publicado

2013-07-10

·

Atualizado

2013-07-11

Descrição por

CVSS 2.0
6.6
Média
MétricasAV:L/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Alstom Grid MiCOM S1 Agile versions prior to 1.0.3 Alstom Grid MiCOM S1 Studio (affected versions not specified)
Description The issue is related to weak permissions for the MiCOM S1 %PROGRAMFILES% directory. This weakness allows local users to gain privileges via a Trojan horse executable file.
Recommendations For Alstom Grid MiCOM S1 Agile versions prior to 1.0.3, update to version 1.0.3 or later. For Alstom Grid MiCOM S1 Studio, at the moment, there is no information about a newer version that contains a fix for this issue.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2013-2786
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com