CVE-2011-2963

CVE-2011-2963 describes an authentication bypass vulnerability in Progea Movicon 11.2 before Build 1084, specifically within the TCPUploadServer.exe component. This critical flaw allows unauthenticated remote attackers to exploit TCP port 10651 to gain sensitive information, delete files, execute arbitrary code, or trigger a denial of service. With a CVSS score of 10.0, indicating maximum severity, the vulnerability is easily exploitable over the network with low attack complexity and no authentication required, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, an ExploitDB entry (EDB-17034) confirms the existence of public exploit code, though there is minimal community discussion or media coverage surrounding this decade-old vulnerability.