CVE-2011-2963

2011-07-2919:00:00

mitre

www.cve.org

progea movicon 11.2

tcpuploadserver.exe

authentication

remote attack

denial of service

AI Score

7.8

Confidence

High

EPSS

0.1

Percentile

95.0%

JSON

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.