GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an attacker to manipulate widgets and UI elements.Referenceshttps://ics-cert.us-cert.gov/advisories/ICSA-19-122-02