CVE-2017-14019

CVE-2017-14019 describes an Unquoted Search Path vulnerability in Progea Movicon versions 11.5.1181 and earlier. This flaw allows an authorized local user to insert arbitrary code into an unquoted service path, potentially escalating their privileges. With a CVSS score of 6.7 (Medium), the vulnerability has low attack complexity and requires high privileges to exploit, but could lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.