CVE-2012-1804
published 2012-05-14CVE-2012-1804: The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP…
PriorityP433high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.85%
84.9th percentile
The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| progea | movicon | <= 11.2 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-832r-6r5g-wgp7: The OPC server in Progea Movicon before 11
ghsa_unreviewed·2022-05-17
CVE-2012-1804 [HIGH] CWE-119 GHSA-832r-6r5g-wgp7: The OPC server in Progea Movicon before 11
The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.
CISA ICS
Progea Movicon Memory Corruption Vulnerability
cisa_ics·2013-05-01
Progea Movicon Memory Corruption Vulnerability
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Progea Movicon Memory Corruption Vulnerability
Last RevisedMay 01, 2013
Alert CodeICSA-12-131-01
## Overview
Security researcher Dillon Beresford of IXIAhttp://www.ixiacom.com/, website last accessed May 10, 2012. has identified a memory corruption vulnerability in the Progea Movicon application. This vulnerability can be exploited by a remote attacker; however, no public exploits are currently known to exist.
ICS-CERT has coordinated these vulnerabilities with Progea, which has produced a new version (V11.3) that resolves the reported vulnerability. Mr. Beresford has tested th
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/81814http://secunia.com/advisories/49092http://www.securityfocus.com/bid/53484http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-01.pdfhttp://osvdb.org/81814http://secunia.com/advisories/49092http://www.securityfocus.com/bid/53484http://www.us-cert.gov/control_systems/pdf/ICSA-12-131-01.pdf
2012-05-14
Published