MEDIUM🇵🇱 Wersja polska

CVE-2019-18255

CVSS 5.5v3.1pub. 2021-02-18upd. 2024-11-21

HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

  • Ge Ifix

    APP
    Ge
    ≤ 6.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2023-0598HIGH7.8ten sam produkt

GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable t...

CVE-2019-18243MEDIUM5.5ten sam produkt

HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configura...

CVE-2018-17925MEDIUM4.8ten sam produkt

Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identifi...

CVE-2016-9360MEDIUM6.7ten sam produkt

An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions,...

CVE-2023-5908CRITICAL9.1PL ✓ten sam vendor

Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych