Vulnerabilities

TI-2017-10201 CVE-2017-14019 · GHSA-cj9f-2hwg-whqr

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version…

LOW 30

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00406 Published 2017-10-19 No fix listed CWE-428

TI-2017-10199 CVE-2017-14017 · GHSA-7xjq-r49q-hwq9

Uncontrolled search path in Progea Movicon SCADA/HMI

LOW 35

An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00699 Published 2017-10-19 No fix listed CWE-427

TI-2014-00724 CVE-2014-0778 · GHSA-4g3g-9jv2-fhx5

Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor

LOW 25

TCPUploader module listens on Port 10651/TCP for incoming connections.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01308 Published 2014-04-19 Fixed in Build 1150, 11.4.1150 CWE-200

TI-2012-01589 CVE-2012-1804 · GHSA-832r-6r5g-wgp7

The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of…

LOW 39

The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02816 Published 2012-05-14 No fix listed CWE-119

TI-2011-02615 CVE-2011-2963 · GHSA-xxpf-83g5-3w2v

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require…

MEDIUM 53

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07625 Published 2011-07-29 No fix listed CWE-287