CVE-2013-0665
Summary
| CVE | CVE-2013-0665 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-03-21 14:55:00 UTC |
| Updated | 2013-03-21 21:04:00 UTC |
| Description | Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which allows local users to replace executable files, and consequently gain privileges, via standard filesystem operations. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Selinc | Acselerator Quickset | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Schweitzer Engineering Laboratories AcSELerator Improper Authorization Vulnerability | ICS-CERT | MISC | ics-cert.us-cert.gov | US Government Resource |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.