Vendors / Progea Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 2
Exploited now Progea records in CISA KEV No Progea vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs…
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07625 · Published 2011-07-29 · No fix listed CWE-287
Priority LOW 39
The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.
CVSS 2.0 HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02816 · Published 2012-05-14 · No fix listed CWE-119
Priority LOW 35
An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00699 · Published 2017-10-19 · No fix listed CWE-427
Priority LOW 30
An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.
CVSS 3.0 MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00406 · Published 2017-10-19 · No fix listed CWE-428
Priority LOW 25
TCPUploader module listens on Port 10651/TCP for incoming connections.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01308 · Published 2014-04-19 · Fixed in Build 1150, 11.4.1150 CWE-200
Open these records in search → All records by CVSS severity
4 2 2 0 0
THREATIST.IORead the docs