Vulnerability Description
An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Progea | Movicon | <= 11.5.1181 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/101483Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/101483Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-290-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2017-14017?
CVE-2017-14017 is a vulnerability with a CVSS score of 7.8 (HIGH). An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote ...
How severe is CVE-2017-14017?
CVE-2017-14017 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-14017?
Check the references section above for vendor advisories and patch information. Affected products include: Progea Movicon.