CVE-2019-18255CWE-732

HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects

published February 18, 2021

CVSS
—
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2021-02-18T15:00Z
EPSS history
Timeline
  • 18 FEB 15:00Z
    HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects
    cvelistv5