PT-2014-3838 · Progea · Progea Movicon

Published 2014-04-19 · Updated 2025-09-24 · CVE-2014-0778

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Progea Movicon versions prior to 11.4.1150

Description The issue allows remote attackers to obtain potentially sensitive version information via network traffic to TCP port 10651. This is related to the TCPUploader module.

Recommendations For versions prior to 11.4.1150, update to version 11.4.1150 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-0778

Affected Products

Progea Movicon

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-0778 · Security Note
• http://progea.com/it-it/downloads/software.aspx · Note
• https://t.me/cveNotify/136361 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-14-105-01 · Note
• http://ics-cert.us-cert.gov/advisories/ICSA-14-105-01 · Note