CVE-2017-14019

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges.

Score

CVSS 3.0 6.7 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-10-19

Last modified

2024-08-05

Weaknesses

CWE-428

Affected products

• Movicon (Progea)

References

• http://www.securityfocus.com/bid/101483
• https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01