PT-2019-18167 · Ge · Ge Communicator

Reid Wightman · Published 2019-05-09 · Updated 2020-10-16 · CVE-2019-6566

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GE Communicator versions prior to 4.0.517

Description The issue allows a non-administrative user to replace the uninstaller with a malicious version, potentially enabling an attacker to gain administrator privileges to the system.

Recommendations For versions prior to 4.0.517, update to version 4.0.517 or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2019-6566

Affected Products

Ge Communicator

References · 3

• https://osv.dev/vulnerability/CVE-2019-6566 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6566 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02 · Note