GE Vernova S1 Agile Configuration Software Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in GE Vernova S1 Agile Configuration Software for MiCOM P40 relays, affecting all versions prior to 3.1.1. This vulnerability allows a malicious user with basic privileges on the workstation to replace a legitimate executable file with a malicious one. Upon restarting the computer, the attacker's code could be executed, potentially granting them administrator privileges on the machine.

Impact

Exploitation of this vulnerability could lead to unauthorized administrator privileges on the affected workstation.

Remediation

Users are advised to upgrade to GE Vernova S1 Agile version 3.1.1, released in January 2025. For additional support, contact the GE Vernova global support team or the GE Product Security Incident Response Team (PSIRT).