PT-2013-3929

CVE-2013-2786

·

Published

2013-07-10

·

Updated

2013-07-11

Description by

CVSS 2.0
6.6
Medium
MetricsAV:L/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Alstom Grid MiCOM S1 Agile versions prior to 1.0.3 Alstom Grid MiCOM S1 Studio (affected versions not specified)
Description The issue is related to weak permissions for the MiCOM S1 %PROGRAMFILES% directory. This weakness allows local users to gain privileges via a Trojan horse executable file.
Recommendations For Alstom Grid MiCOM S1 Agile versions prior to 1.0.3, update to version 1.0.3 or later. For Alstom Grid MiCOM S1 Studio, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2013-2786
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com