Alstom Grid Multiple Products CVE-2013-2786 Local Access Bypass Vulnerability

Bugtraq ID:	60942
Class:	Design Error
CVE:	CVE-2013-2786
Remote:	No
Local:	Yes
Published:	Jul 03 2013 12:00AM
Updated:	Jul 03 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Alstom MiCOM S1 Agile Software 1.0.2 Alstom Legacy MiCOM S1 Studio Software 0
Not Vulnerable:	Alstom MiCOM S1 Agile Software 1.0.3

Alstom Grid Multiple Products CVE-2013-2786 Local Access Bypass Vulnerability

Multiple Alstom Grid products are prone to a local access-bypass vulnerability.

Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

Note: An attacker can further exploit this issue to gain administrator privileges to the system.

The following Alstom Grid products are vulnerable:

MiCOM S1 Agile Software 1.0.2 and prior
Legacy MiCOM S1 Studio Software

Alstom Grid Multiple Products CVE-2013-2786 Local Access Bypass Vulnerability

An attacker requires local access to the system to exploit this issue.

Alstom Grid Multiple Products CVE-2013-2786 Local Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Alstom Grid Multiple Products CVE-2013-2786 Local Access Bypass Vulnerability

References:

• Alstom Homepage (Alstom)
  
• Advisory (ICSA-13-184-01): Alstom Grid S1 Agile Improper Authorization (ICS-CERT)