CVE-2011-2963
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.63%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 7.63% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- progea/movicon
- Source
- cve@mitre.org
References
- http://www.exploit-db.com/exploits/17034Exploit
- http://www.osvdb.org/72888
- http://www.securityfocus.com/bid/46907Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdfPatch, US Government Resource
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdfPatch, US Government Resource
- http://www.exploit-db.com/exploits/17034Exploit
- http://www.osvdb.org/72888
- http://www.securityfocus.com/bid/46907Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdfPatch, US Government Resource
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdfPatch, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.