Progea records

8 published records for vendor progea.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
45Plan	CVE-2011-3491Proof of concept	Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) aprogea · movicon powerhmi · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	16.2%	Sep 16, 2011
45Plan	CVE-2011-3499Proof of concept	Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possiprogea · movicon powerhmi · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	15.1%	Sep 16, 2011
43Plan	CVE-2011-3498Proof of concept	Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) aprogea · movicon powerhmi · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	9.7%	Sep 16, 2011
42Plan	CVE-2011-2963Proof of concept	TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attprogea · movicon · CWE-287 pre-auth RCE Auth bypass	Critical10.0	—	7.6%	Jul 29, 2011
32Monitor	CVE-2012-1804No exploit	The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption)progea · movicon · CWE-119 Pre-auth Memory safety Denial of service	High7.8	—	2.8%	May 14, 2012
31Monitor	CVE-2017-14017No exploit	An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.progea · movicon · CWE-427 RCE Local privilege escalation	High7.8	—	0.6%	Oct 19, 2017
26Monitor	CVE-2017-14019No exploit	An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.progea · movicon · CWE-428 RCE Local privilege escalation	Medium6.7	—	0.4%	Oct 19, 2017
20Monitor	CVE-2014-0778No exploit	Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actorprogea · movicon · CWE-200 Pre-auth Info leak	Medium5.0	—	1.3%	Apr 19, 2014

CVE-2011-3491
45Plan
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) a
CriticalCVSS 10.0Proof of conceptEPSS 16%
- pre-auth RCE
- Memory safety
progea · movicon powerhmiSep 16, 2011
CVE-2011-3499
45Plan
Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possi
CriticalCVSS 10.0Proof of conceptEPSS 15%
- pre-auth RCE
- Memory safety
progea · movicon powerhmiSep 16, 2011
CVE-2011-3498
43Plan
Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) a
CriticalCVSS 10.0Proof of conceptEPSS 9%
- pre-auth RCE
- Memory safety
progea · movicon powerhmiSep 16, 2011
CVE-2011-2963
42Plan
TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote att
CriticalCVSS 10.0Proof of conceptEPSS 7%
- pre-auth RCE
- Auth bypass
progea · moviconJul 29, 2011
CVE-2012-1804
32Monitor
The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption)
HighCVSS 7.8No exploitEPSS 2%
progea · moviconMay 14, 2012
CVE-2017-14017
31Monitor
An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
progea · moviconOct 19, 2017
CVE-2017-14019
26Monitor
An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.
MediumCVSS 6.7No exploitEPSS 0%
- RCE
- Local privilege escalation
progea · moviconOct 19, 2017
CVE-2014-0778
20Monitor
Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor
MediumCVSS 5.0No exploitEPSS 1%
- Pre-auth
- Info leak
progea · moviconApr 19, 2014