CVE-2011-2963 | BDVDB-2026-46848 Detail

Description#

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/46907
http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf
http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf
http://www.osvdb.org/72888
http://www.exploit-db.com/exploits/17034

Exploit#

http://www.exploit-db.com/exploits/17034

History#

Version 12011-07-29Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.