CVE-2019-6544: ge ge_communicator Improper Access Control
Vulnerability summary
CVE-2019-6544 is a medium (CVSS 6.8) Improper Access Control vulnerability in ge ge_communicator. EPSS estimates a 1.18% chance of exploitation in the next 30 days, higher than 67.2% of scored vulnerabilities.
Timeline
- 09-05-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator privileges. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.18%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
0.00 pp
From 1.18% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ge1 product
- ge_communicator< 4.0.517
1 vendor · 1 product
References
1 links- ics-cert.us-cert.gov/advisories/ICSA-19-122-02X Refsource MISCMitigationThird Party AdvisoryUS Government Resource