PatchTheCVEifix vulnerabilities and fixes
Recent CVEs affecting ifix, with upgrade or downgrade steps. 5 tracked.
ifix has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-03-16. Highest priority: CVE-2023-0598 (score 39/100).
- CVE-2023-0598 HIGH 7.8 DOWNGRADE GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable t
- CVE-2019-18255 MEDIUM 5.5 UPGRADE HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configura
- CVE-2019-18243 MEDIUM 5.5 UPGRADE HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configura
- CVE-2018-17925 MEDIUM 4.8 UPGRADE Multiple instances of this vulnerability (Unsafe ActiveX Control Marked Safe For Scripting) have been identifi
- CVE-2016-9360 MEDIUM 6.7 UPGRADE UPGRADE An issue was discovered in General Electric (GE) Proficy HMI/SCADA iFIX Version 5.8 SIM 13 and prior versions,
FAQ
How do I fix ifix vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ifix being exploited right now?
None of the tracked ifix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ifix CVE should I patch first?
CVE-2023-0598 currently ranks highest (39/100): GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable t.