CVE-2013-0687

CVE-2013-0687 describes a privilege escalation vulnerability in Schneider Electric MiCOM S1 Studio, where the installer routine sets world-writable permissions on executable files. This flaw allows authenticated local attackers to modify service or configuration files with a Trojan horse, potentially leading to privilege escalation or incorrect protective-relay operation. With a CVSS score of 6.6, this vulnerability has a local attack vector and medium attack complexity, but high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.