PatchTheCVECVE-2023-0898: General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DL
CVE-2023-0898 is a medium-severity flaw (CVSS 5.3) affecting micom s1 agile. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 83%) |
| CISA exploited list | No |
| Weakness | CWE-427 |
| Published | 2023-11-07 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-0898?
micom s1 agile: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2023-0898 being exploited?
CVE-2023-0898 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-0898 affect?
CVE-2023-0898 affects micom s1 agile. Severity is medium (CVSS 5.3). General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.
How urgent is CVE-2023-0898?
Priority 23/100. No elevated risk signals yet.