PT-2011-4213 · Progea · Progea Movicon

Publicado 2011-07-29 · Atualizado 2011-08-01 · CVE-2011-2963

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Progea Movicon versions 11.2 before Build 1084

Description The issue allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service via a crafted packet to TCP port 10651, due to the lack of authentication for critical functions in TCPUploadServer.exe.

Recommendations For Progea Movicon version 11.2 before Build 1084, update to Build 1084 or later to resolve the issue.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-2963

Produtos afetados

Progea Movicon

Referências · 7

• 🔥 http://exploit-db.com/exploits/17034 · Exploit
• 🔥 https://exploit-db.com/exploits/17034 · Exploit
• 🔥 http://securityfocus.com/bid/46907 · Exploit
• http://us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf · Correção
• http://us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf · Correção
• http://osvdb.org/72888 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2963 · Nota de Segurança