CVE-2023-0898: Uncontrolled Search Path Element in GE MiCOM S1 Agile

Published Nov 7, 2023

Updated

General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.

Affected Software

1 affected component

GE MiCOM S1 Agile

Remediation

Information

General Electric has released an update that resolves this vulnerability. No action is required by the customer. For more information, see General Electric's Security Advisory https://www.gegridsolutions.com/app/viewfiles.aspx .

Event History

Nov 7, 2023

CVE Published

04:34 PM

Data Sourced

04:34 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-0898?

CVE-2023-0898 is a vulnerability in General Electric MiCOM S1 Agile that allows an attacker to achieve code execution by placing malicious DLL files in the application directory.

How severe is CVE-2023-0898?

CVE-2023-0898 has a severity rating of 7.3 (high).

How does CVE-2023-0898 affect GE MiCOM S1 Agile?

CVE-2023-0898 affects GE MiCOM S1 Agile by allowing an attacker to achieve code execution through malicious DLL files placed in the application directory.

What is the Common Weakness Enumeration (CWE) ID for CVE-2023-0898?

The Common Weakness Enumeration (CWE) ID for CVE-2023-0898 is 427.

How can I fix CVE-2023-0898 in GE MiCOM S1 Agile?

To fix CVE-2023-0898 in GE MiCOM S1 Agile, apply the necessary patches or updates provided by General Electric and ensure that no unauthorized DLL files are present in the application directory.