CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2019-6534
High (7.8) in gemalto sentinel ultrapro client library. EPSS 1.5% chance of exploitation in the next 30 days.
The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-427
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gemalto:sentinel_ultrapro_client_library
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
- https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
- https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
- https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02