Progea Movicon 11.5.1181 Search Path Issues Vulnerability

Progea Movicon versions 11.5.1181 and below suffer from search path related vulnerabilities. Vendor: Progea Equipment: Movicon SCADA/HMI Vulnerability: Uncontrolled Search Path Element, Unquoted Search Path or Element Advisory URL...

Progea Movicon 11.5.1181 Search Path Issues

Vendor: Progea Equipment: Movicon SCADA/HMI Vulnerability: Uncontrolled Search Path Element, Unquoted Search Path or Element Advisory URL https://ipositivesecurity.com/2017/10/28/ics-progea-movicon-scadahmi-vulnerabilities/ ICS-CERT Advisory https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01...

CVE-2017-14019

CVE-2017-14019 is a documented vulnerability in Progea Movicon (11.5.1181 and prior) classified as an Unquoted Search Path or Element issue. The underlying flaw allows an authorized local attacker to insert arbitrary code into the unquoted service path and escalate privileges. Affected product: M...