Unrated severityNVD Advisory· Published Jul 29, 2011· Updated Jun 16, 2026

CVE-2011-2963

Description

TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progea/Movicon2 versions
cpe:2.3:a:progea:movicon:11.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:progea:movicon:11.2:*:*:*:*:*:*:*
- (no CPE)range: 11.2 < Build 1084

Patches

Vulnerability mechanics

References

www.us-cert.gov/control_systems/pdf/ICSA-11-056-01.pdfnvdPatchUS Government Resource
www.us-cert.gov/control_systems/pdf/ICSA-11-056-01A.pdfnvdPatchUS Government Resource
www.exploit-db.com/exploits/17034nvdExploit
www.securityfocus.com/bid/46907nvdExploit
www.osvdb.org/72888nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.006
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000