CVEvulnerability

CVE-2019-6544

5.6 MEDIUM Published 2019-05-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.6 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-284

Description

GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator privileges. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.

Affected configurations

• ge ge communicator (< 4.0.517)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References