PatchTheCVE: moviconhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-14019: An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and priorhttps://patchthecve.com/cve/CVE-2017-14019.htmlhttps://patchthecve.com/cve/CVE-2017-14019.htmlWed, 17 Jun 2026 01:05:27 +0000MEDIUM 6.7: An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has been identified, which may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate his or her privilCVE-2017-14017: An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and priorhttps://patchthecve.com/cve/CVE-2017-14017.htmlhttps://patchthecve.com/cve/CVE-2017-14017.htmlWed, 17 Jun 2026 01:05:26 +0000HIGH 7.8: An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file.CVE-2014-0778: TCPUploader module listens on Port 10651/TCP for incoming connectionshttps://patchthecve.com/cve/CVE-2014-0778.htmlhttps://patchthecve.com/cve/CVE-2014-0778.htmlWed, 17 Jun 2026 00:03:37 +0000MEDIUM 4.3: TCPUploader module listens on Port 10651/TCP for incoming connections. Exploitation of this vulnerability could allow a remote unauthenticated user access to release OS version information. While this is a minor vulnerability, it represents a method for further network reconnaissance.CVE-2012-1804: The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounhttps://patchthecve.com/cve/CVE-2012-1804.htmlhttps://patchthecve.com/cve/CVE-2012-1804.htmlTue, 16 Jun 2026 23:40:20 +0000HIGH 7.8: The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.CVE-2011-2963: TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical funchttps://patchthecve.com/cve/CVE-2011-2963.htmlhttps://patchthecve.com/cve/CVE-2011-2963.htmlTue, 16 Jun 2026 23:32:20 +0000HIGH 10.0: TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions, which allows remote attackers to obtain sensitive information, delete files, execute arbitrary programs, or cause a denial of service (crash) via a crafted packet to TCP port 10651.