Lucene search

MitreCVE-2011-2963

HistoryJul 29, 2011 - 7:55 p.m.

CVE-2011-2963

2011-07-2919:55:04

CWE-287

mitre

web.nvd.nist.gov

cve-2011-2963

progea movicon 11.2

tcpuploadserver.exe

authentication bypass

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.1

Percentile

95.0%

JSON

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.

Affected configurations

Nvd

Node

progeamoviconMatch11.2

VendorProductVersionCPE
progeamovicon11.2cpe:2.3:a:progea:movicon:11.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
progea	movicon	11.2	cpe:2.3:a:progea:movicon:11.2:::::::*

References

www.exploit-db.com/exploits/17034

www.osvdb.org/72888

www.securityfocus.com/bid/46907

www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf

www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.1

Percentile

95.0%

JSON

Related for CVE-2011-2963