CVE Vulnerability

CVE-2019-6544

GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator privileges. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

5.6 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02 Mitigation Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:ge:ge_communicator:*:*:*:*:*:*:*:*
Information

Published : 2019-05-09 03:29

Updated : 2020-10-16 04:11

NVD link : CVE-2019-6544

Mitre link : CVE-2019-6544

Products Affected
No products.
CWE
NVD-CWE-Other