Uncontrolled Search Path Element in GE MiCOM S1 Agile

published 2023-11-07 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-12887

cvss: 5.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 23%
public exploits: 0; none known

General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-311-01 updated 2023-11-07 cvss 5.3

GE MiCOM S1 Agile

General Electric MiCOM S1 Agile
affected: vendor fix, mitigation “For more information, see General Electric's Security Advisory.” gegridsolutions.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 21 mo ago (2025-01-16)

Exploit prediction

0.30% chance of exploitation in the next 30 days, higher than 23% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.3	CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
NVD	3.1	7.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

General Electric MiCOM S1 Agile

Classification

Weakness

CWE-427 Uncontrolled Search Path Element

References

cisa.gov /news-events/ics-advisories/icsa-23-311-23
government-resource, third-party-advisory, us-government-resource

Sources

CVE List CVE-2023-0898
NVD CVE-2023-0898

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary