Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2014-2375

Ecava IntegraXor SCADA Server External Control of File Name or Path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ecava IntegraXor SCADA Server

Default version status: unaffected

  • 0 to ≤ v4.1.4360affected
  • 0 to ≤ v4.1.4392affected

References