CVE-2014-0778 Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TCPUploader module listens on Port 10651/TCP for incoming connections.
Exploitation of this vulnerability could allow a remote unauthenticated
user access to release OS version information. While this is a minor
vulnerability, it represents a method for further network
reconnaissance.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progea movicon | = 11.4 | No fix listed |
| progea movicon | >= 11.4, < Build 1150 | Build 1150 |
References
- www.progea.com
- www.cisa.gov
- ics-cert.us-cert.gov us-government-resource