CVE-2014-2375 Ecava IntegraXor SCADA Server External Control of File Name or Path
HighCVSS 9.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecava integraxor | <= 4.1.4360 | No fix listed |
| ecava integraxor | <= 4.1.4392 | No fix listed |
| ecava IntegraXor SCADA Server | <= v4.1.4360 | No fix listed |
| ecava IntegraXor SCADA Server | <= v4.1.4392 | No fix listed |
References
- www.cisa.gov
- ics-cert.us-cert.gov patch third-party-advisory us-government-resource