Vulnerability Description
GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator privileges. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ge | Ge Communicator | < 4.0.517 |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02MitigationThird Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2019-6544?
CVE-2019-6544 is a vulnerability with a CVSS score of 5.6 (MEDIUM). GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the executio...
How severe is CVE-2019-6544?
CVE-2019-6544 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-6544?
Check the references section above for vendor advisories and patch information. Affected products include: Ge Ge Communicator.