ICSA-21-040-01

icsaUScisa_csaf_ot

GE Digital HMI/SCADA iFIX

Advisory ansehen veröffentlicht 2021-02-09

Successful exploitation of these vulnerabilities could allow an attacker to escalate their privileges.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-18243USmedium5.5—
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation.
CVE-2019-18255USmedium5.5—
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (2)

  • MitigationHMI/SCADA iFIX

    GE Digital recommends users immediately upgrade all instances of the affected software to GE Digital's iFIX product v6.5. GE Digital believes the upgrade contains security enhancements that will help mitigate the risk that the vulnerabilities may be exploited by an attacker.

  • MitigationHMI/SCADA iFIX

    GE Digital recommends users immediately upgrade all instances of the affected software to GE Digital's iFIX product v6.5. GE Digital believes the upgrade contains security enhancements that will help mitigate the risk that the vulnerabilities may be exploited by an attacker.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan