CVE-2019-18255

HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.

Score

CVSS 3.1 5.5 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2021-02-18

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Ifix (Ge)

References

• https://us-cert.cisa.gov/ics/advisories/icsa-21-040-01