Medium ICSA-17-290-01 2 CVEs

Progea Movicon SCADA/HMI

Published Oct 17, 2017 · Updated Oct 17, 2017

Vendor: Progea Product: Movicon

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 2

Unscored —

CVE-2017-14017

An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled…

Oct 19, 2017
Unscored —

CVE-2017-14019

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted sear…

Oct 19, 2017

Revision history

2017-10-17 #1
ICSA-17-290-01 Progea Movicon SCADA/HMI

References

ICS Advisory ICSA-17-290-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-290-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-290-01