RSS   Vulnerabilities for 'Movicon'   RSS

2017-10-19
 
CVE-2017-14019

CWE-428
 
 
An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges.

 
 
CVE-2017-14017

CWE-427
 
 
An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file.

 
2014-04-19
 
CVE-2014-0778

CWE-200
 
 
The TCPUploader module in Progea Movicon 11.4 before 11.4.1150 allows remote attackers to obtain potentially sensitive version information via network traffic to TCP port 10651.

 
2012-05-14
 
CVE-2012-1804

CWE-119
 
 
The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.

 
2011-07-29
 
CVE-2011-2963

CWE-287
 
 
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.

 

 >>> Vendor: Progea 2 Products
Movicon
Movicon powerhmi

Copyright 2024, cxsecurity.com

 

Back to Top