CVE-2017-14019

6.7 mediumEPSS 0.4%

Medium (6.7) in progea movicon. EPSS 0.4% chance of exploitation in the next 30 days.

An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privileges.

Severity

CVSS 3.0

6.7 medium

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2017-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progea:movicon

References

http://www.securityfocus.com/bid/101483
https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01
http://www.securityfocus.com/bid/101483
https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01

Check your stack JSON