CVE-2023-0898
Assigner: icscert
Published: 2023-11-07T16:34:41.246Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: MiCOM S1 Agile
vendor: General Electric
versions: status: affected
version: All versions 
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Sushant Mane from CoE-CNDS Lab, VJTI
type: finder
user: 00000000-0000-4000-9000-000000000000
value:  Anooja Joy from CoE-CNDS Lab, VJTI
type: finder
user: 00000000-0000-4000-9000-000000000000
value: Dr. Faruk Kazi from CoE-CNDS Lab, VJTI
descriptions: supportingMedia: base64: no
type: text/html
value: 

<p>General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.</p><br>


value: 
General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.





metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-427
description: CWE-427 Uncontrolled Search Path Element
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<p>General Electric has released an update that resolves this vulnerability. No action is required by the customer.</p><p>For more information, see General Electric's <a target="_blank" rel="nofollow" href="https://www.gegridsolutions.com/app/viewfiles.aspx?prod=S1Agile&amp;type=21">Security Advisory</a>.</p>

<br>
value: 
General Electric has released an update that resolves this vulnerability. No action is required by the customer.

For more information, see General Electric's  Security Advisory https://www.gegridsolutions.com/app/viewfiles.aspx .





source: discovery: UNKNOWN
title: Uncontrolled Search Path Element in GE MiCOM S1 Agile
x_generator: engine: Vulnogram 0.1.0-dev