CVE-2019-6564CWE-427

GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow…

published May 9, 2019

CVSS
—
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow an attacker to gain administrative privileges on a system during installation or upgrade.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2019-05-09T14:27Z
EPSS history
Timeline
  • 09 MAY 14:27Z
    GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow…
    cvelistv5