What’s Vulnerable › Vulnerabilities

CVE-2019-6534

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-11 · updated 2026-06-17
• Weakness: CWE-427

Description

The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file.

Affected products

• Gemalto Sentinel UltraPro: 1.3.0, 1.3.1, 1.3.2

References

• https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
• https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
• https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
• https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf
• https://ics-cert.us-cert.gov/advisories/ICSA-19-073-02
• https://ics-cert.us-cert.gov/advisories/ICSA-19-078-01
• https://supportportal.gemalto.com/csm?id=kb_article_view&sysparm_article=KB0017694
• https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec131.pdf

Get alerted when CVE-2019-6534 or the next vulnerability affects your stack