CVE-2014-0778

CVE-2014-0778 affects Progea Movicon Movicon 11.x (before 11.4.1150). The TCPUploader module listens on port 10651/TCP and could allow a remote, unauthenticated attacker to disclose OS version information, enabling a minimal information-disclosure vulnerability that could aid reconnaissance. The ...

Progea Movicon SCADA Information Disclosure Vulnerability

OVERVIEW Celil Ünüver of SignalSEC Ltd. has identified an information disclosure vulnerability in the Progea Movicon application. Progea has produced a new version that mitigates this vulnerability. The researcher has tested the new version to validate that it resolves the vulnerability. This...

CVE-2012-1804

The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service out-of-bounds read and memory corruption via a crafted HTTP request...

Out-of-bounds

The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service out-of-bounds read and memory corruption via a crafted HTTP request...

CVE-2012-1804

The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service out-of-bounds read and memory corruption via a crafted HTTP request...

CVE-2012-1804

The CVE refers to Progea Movicon before 11.3 with an out-of-bounds read/memory corruption in the OPC server that can be triggered remotely via a crafted HTTP request to the Movicon OPC server (default port 9090), causing a denial of service. Affected products are Movicon versions prior to 11.3. T...

CERT Warns On Critical Hole In SCADA Software By Italian Firm Progea

The U.S. Department of Homeland Security issued a bulletin on Thursday warning readers about a previously undisclosed, critical vulnerability in Movicon 11, a product used to manage critical infrastructure including the manufacturing, energy and water sectors. DHS’s Industrial Control Systems Cyb...

Progea Movicon Memory Corruption Vulnerability

Overview Security researcher Dillon Beresford of IXIAhttp://www.ixiacom.com/, website last accessed May 10, 2012. has identified a memory corruption vulnerability in the Progea Movicon application. This vulnerability can be exploited by a remote attacker; however, no public exploits are currently...

Progea Movicon Negative Content-Length Buffer Overflow (CVE-2011-3491)

A remote code execution vulnerability has been reported in Progea Movicon. The vulnerability is due to a sanitization error while parsing the Content-Length header in an HTTP request. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to an affected serve...

CVE-2011-3499

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3498

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

Heap overflow

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

Memory corruption

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3499

The CVE-2011-3499 vulnerability affects Progea Movicon / PowerHMI 11.2.1085 and earlier. A memory corruption path via an EIDP packet with a large size field allows remote attackers to cause a denial of service and potentially execute arbitrary code by writing a zero byte to an arbitrary memory lo...

CVE-2011-3498

Progea Movicon/PowerHMI is affected by CVE-2011-3498 (and related 11.2.1085 and earlier). The issue is a heap-based buffer overflow triggered by an HTTP request on port 808/TCP with a long content-length, allowing remote attackers to cause denial of service and potentially execute arbitrary code....

CVE-2011-3498

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2011-3499

Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service memory corruption and crash and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location...

CVE-2011-3491

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

Heap overflow

Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a negative Content-Length field...

CVE-2011-3491

Progea Movicon/PowerHMI systems are affected by CVE-2011-3491 due to a heap-based buffer overflow triggered by a malformed HTTP Content-Length header in Port 808/TCP requests. Affected products include Movicon 11.2.1085.3 and earlier and PowerHMI 11.2.1085 and earlier. The root cause is a sanitiz...