Skip to content
OpenAdvisories
High ICSA-19-122-02 5 CVEs

GE Communicator

Published May 2, 2019 · Updated May 2, 2019

Vendor: General Electric (GE) Product: Communicator Application Product: Communicator Installer Product: Communicator MeterManager Product: Communicator PostGreSQL Product: Communicator WISE Uninstaller

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges, manipulate widgets and UI elements, gain control over the database, or execute administrative commands.

Vulnerabilities 5

  • Unscored —
    CVE-2019-6544

    GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivil…

  • Unscored —
    CVE-2019-6546

    GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working director…

  • Unscored —
    CVE-2019-6548

    GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may al…

  • Unscored —
    CVE-2019-6564

    GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the in…

  • Unscored —
    CVE-2019-6566

    GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a mali…

Revision history

  1. #1

    ICSA-19-122-02 GE Communicator

References