CVE-2011-2963

Published: Jul 29, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.

Affected (1)

Products: Progea: Movicon

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Progea Movicon	Version 11.2

Related CWEs

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (10)

http://www.exploit-db.com/exploits/17034

Source: cve@mitre.org

Exploit

http://www.osvdb.org/72888

Source: cve@mitre.org

http://www.securityfocus.com/bid/46907

Source: cve@mitre.org

Exploit

http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf

Source: cve@mitre.org

PatchUS Government Resource

http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf

Source: cve@mitre.org

PatchUS Government Resource

http://www.exploit-db.com/exploits/17034

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/72888

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46907

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

Timeline

No history available yet.