CVE-2019-18255

Publication date

2021-02-18 15:00:54

Family

icscert

State

PUBLISHED

Description

HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.