CVE-2014-0752

Published: Jan 9, 2014Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.

Affected (10)

Products: Ecava: Integraxor

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Ecava Integraxor	Up to 4.1.4360
Ecava Integraxor	Version 3.5.3900.10
Ecava Integraxor	Version 3.5.3900.5
Ecava Integraxor	Version 3.6.4000.0
Ecava Integraxor	Version 3.60.4061
Ecava Integraxor	Version 3.71.4200
Ecava Integraxor	Version 3.71
Ecava Integraxor	Version 3.72
Ecava Integraxor	Version 4.00
Ecava Integraxor	Version 4.1

Related CWEs

Exposure of Access Control List Files to an Unauthorized Control Sphere

The product stores access control list files in a directory or other container that is accessible to actors outside of the intended control sphere.

References (4)

http://www.integraxor.com/blog/category/security/vulnerability-note/

Source: ics-cert@hq.dhs.gov

PatchVendor Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-14-008-01

Source: ics-cert@hq.dhs.gov

http://ics-cert.us-cert.gov/advisories/ICSA-14-008-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

http://www.integraxor.com/blog/category/security/vulnerability-note/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.