CVE-2013-0687

2022-10-0316:15:02

icscert

www.cve.org

schneider electric

micom s1 studio

installer

world-writable

permissions

vulnerability

local users

modify

executable files

privilege escalation

protective-relay operation

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.7%

JSON

The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users to modify the service or the configuration files, and consequently gain privileges or trigger incorrect protective-relay operation, via a Trojan horse executable file.