CVE-2017-14019 | BDVDB-2026-91971 Detail

Progea Movicon SCADA/HMI

Description#

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-428

References#

http://www.securityfocus.com/bid/101483
https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01

Exploit#

No public exploit known

History#

Version 12017-10-19Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.