critical10.0Public exploit code
CVE-2011-2963
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain se…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Progea Movicon 11 - 'TCPUploadServer' Remote File System2011-03-23 · remote · windows · Verified
Impact
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progea | Movicon | Version 11.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/17034
- http://www.osvdb.org/72888
- http://www.securityfocus.com/bid/46907
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf
- http://www.exploit-db.com/exploits/17034
- http://www.osvdb.org/72888
- http://www.securityfocus.com/bid/46907
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdf
- http://www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdf