- Description
- Alstom Grid MiCOM S1 Agile before 1.0.3 and Alstom Grid MiCOM S1 Studio use weak permissions for the MiCOM S1 %PROGRAMFILES% directory, which allows local users to gain privileges via a Trojan horse executable file.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 6.6
- Impact score
- 10
- Exploitability score
- 2.7
- Vector string
- AV:L/AC:M/Au:S/C:C/I:C/A:C
- nvd@nist.gov
- CWE-264
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:alstom:micom_s1_agile:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "447FE515-B056-4EAB-84E3-747BA30558D1",
"versionEndIncluding": "1.0.2"
},
{
"criteria": "cpe:2.3:a:alstom:micom_s1_studio:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "800D74C7-F46C-4790-A5F7-7195F6C50699"
}
],
"operator": "OR"
}
]
}
]