GCVE - cpe:2.3:a:progea:movicon:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:progea:movicon:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Progea (`5b850b52-5b52-5746-992f-b401e3c27ad5`)
Product	Movicon (`6575fb68-5412-50b0-bd6c-1e0fbde638ab`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-14017`	vulnerable	2026-06-08 05:08:49.054393	Details available An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file. Published: 2017-10-19T23:00:00.000Z Updated: 2024-08-05T19:13:41.696Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/101483 https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0778`	vulnerable	2026-06-08 05:05:14.280576	Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for further network reconnaissance. Published: 2014-04-19T19:00:00.000Z Updated: 2025-09-24T21:24:10.830Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-14-105-01 http://www.progea.com/it-it/downloads/software.aspx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1804`	vulnerable	2026-06-08 05:00:51.001885	Details available The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request. Published: 2012-05-14T20:00:00.000Z Updated: 2024-08-06T19:08:38.508Z Open on db.gcve.eu Reference links http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-01.pdf http://secunia.com/advisories/49092 http://osvdb.org/81814 http://www.securityfocus.com/bid/53484	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.