Read the docs
TI-2014-00724 Aliases CVE-2014-0778GHSA-4g3g-9jv2-fhx5

Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor

Priority LOW 25CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for further network reconnaissance.

Why it matters now

EPSS 0.01308 70th percentileScored 2026-11-07
Fix Fixed Movicon (Progea): Build 1150, 11.4.1150

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ProgeaMovicon11.4 to before Build 1150Build 1150, 11.4.1150Patch availableCNA
  • Movicon VendorProgea Affected 11.4 to before Build 1150 Fixed in Build 1150, 11.4.1150 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:progea:movicon:11.4:*:*:*:*:*:*:*11.4VulnerableProgea
  • cpe:2.3:a:progea:movicon:11.4:*:*:*:*:*:*:* Versions 11.4 Vulnerable ·Progea

Remediation

  • Fix · CNA Movicon (Progea) Fixed in Build 1150, 11.4.1150

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-0778
  2. 2026-10-03 Alias added: GHSA-4g3g-9jv2-fhx5

References

Other 2

  • TI-2011-02615 TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require… CVSS 2.0HIGH 10.0
  • TI-2012-01589 The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of… CVSS 2.0HIGH 7.8
  • TI-2017-10199 Uncontrolled search path in Progea Movicon SCADA/HMI CVSS 3.0HIGH 7.8
  • TI-2017-10201 An Unquoted Search Path or Element issue was discovered in Progea Movicon Version… CVSS 3.0MEDIUM 6.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences