CVE-2019-6564

2019-05-0914:27:08

CWE-427

icscert

www.cve.org

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow an attacker to gain administrative privileges on a system during installation or upgrade.

CNA Affected

[
  {
    "product": "GE Communicator",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 4.0.517"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-19-122-02