CVE-2019-18243: Ge Ifix

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation.

Affected products

• Ge Ifix: up to and including 6.1

Published 2021-02-18. Last modified 2026-06-17.