CVE-2014-0778 Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor
Remote unauthenticated attackers can access OS version information via the TCPUploader module, aiding network reconnaissance in Progea Movicon SCADA systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-0778?
CVE-2014-0778 is a medium-severity vulnerability in Progea Movicon, published on 19 Apr 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for further network reconnaissance.
Weakness: CWE-200
Which versions are affected by CVE-2014-0778?
It affects 1 product.
Products include Progea Movicon.
How do I fix CVE-2014-0778?
No fix has been published for CVE-2014-0778 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-0778 being exploited?
There is no known exploitation of CVE-2014-0778 in the wild and no public exploit code.
Other vulnerabilities in Progea Movicon
Sources
Also known as GHSA-4g3g-9jv2-fhx5.