PT-2011-4213 · Progea · Progea Movicon

Published 2011-07-29 · Updated 2011-08-01 · CVE-2011-2963

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Progea Movicon versions 11.2 before Build 1084

Description The issue allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service via a crafted packet to TCP port 10651, due to the lack of authentication for critical functions in TCPUploadServer.exe.

Recommendations For Progea Movicon version 11.2 before Build 1084, update to Build 1084 or later to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-2963

Affected Products

Progea Movicon

References · 7

• 🔥 http://exploit-db.com/exploits/17034 · Exploit
• 🔥 https://exploit-db.com/exploits/17034 · Exploit
• 🔥 http://securityfocus.com/bid/46907 · Exploit
• http://us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf · Patch
• http://us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-2963 · Security Note
• http://osvdb.org/72888 · Note