CVE-2013-0687 - The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse executable file

Back Back to CVE browser

MEDIUM

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse executable file

Published Apr 18, 2013

6.6

MEDIUM

CVSS 2.0

EPSS 0.34%

Description

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse executable file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://download.schneider-electric.com/files?p_File_Id=56543584&p_File_Name=SEVD-2013-087-01-MiCOM-S1-Studio-SW.pdf
x_refsource_CONFIRMVendor Advisory
http://ics-cert.us-cert.gov/pdf/ICSA-13-100-01.pdf
x_refsource_MISCUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0698
Advisory

Link	Providers	Tags
http://download.schneider-electric.com/files?p_File_Id=56543584&p_File_Name=SEVD-2013-087-01-MiCOM-S1-Studio-SW.pdf		x_refsource_CONFIRMVendor Advisory
http://ics-cert.us-cert.gov/pdf/ICSA-13-100-01.pdf		x_refsource_MISCUS Government Resource
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0698		Advisory