CVEvulnerability
CVE-2011-2963
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-07-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.
Affected configurations
• progea movicon 11.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.exploit-db.com/exploits/17034 Exploit
- http://www.osvdb.org/72888 www.osvdb.org
- http://www.securityfocus.com/bid/46907 Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf Patch, US Government Resource
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf Patch, US Government Resource
- http://www.exploit-db.com/exploits/17034 Exploit
- http://www.osvdb.org/72888 www.osvdb.org
- http://www.securityfocus.com/bid/46907 Exploit
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf Patch, US Government Resource
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf Patch, US Government Resource