CVE-2014-0778: Progea Movicon SCADA Exposure of Sensitive Information to an Unauthorized Actor

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-19 · updated 2026-06-17
Weakness: CWE-200

Description

TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for further network reconnaissance.

Affected products

Progea Movicon SCADA/HMI: 11.4

References

http://www.progea.com/it-it/downloads/software.aspx
https://www.cisa.gov/news-events/ics-advisories/icsa-14-105-01
http://ics-cert.us-cert.gov/advisories/ICSA-14-105-01

Get alerted when CVE-2014-0778 or the next vulnerability affects your stack