CVE-2011-2963 TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execut...
HighCVSS 10.0
EPSS 7.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progea movicon | = 11.2 | No fix listed |
References
- 17034 exploit
- 72888 vdb-entry
- 46907 exploit vdb-entry
- www.us-cert.gov patch us-government-resource
- www.us-cert.gov patch us-government-resource