GE Digital HMI/SCADA iFIX
Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-18243US | medium5.5 | — | ||
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation. | ||||
| CVE-2019-18255US | medium5.5 | — | ||
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation. | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationHMI/SCADA iFIX
GE Digital recommends users immediately upgrade all instances of the affected software to GE Digital's iFIX product v6.5. GE Digital believes the upgrade contains security enhancements that will help mitigate the risk that the vulnerabilities may be exploited by an attacker.
- MitigationHMI/SCADA iFIX
GE Digital recommends users immediately upgrade all instances of the affected software to GE Digital's iFIX product v6.5. GE Digital believes the upgrade contains security enhancements that will help mitigate the risk that the vulnerabilities may be exploited by an attacker.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan