CVE-2014-2375

Published: Sep 15, 2014Modified: May 6, 2026

9.0

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:C

Exploitability: 10.0 / Impact: 8.5

Source: NVD

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

Affected (2)

Products: Ecava: Integraxor

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ecava Integraxor	Up to 4.1.4360

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Ecava Integraxor	Up to 4.1.4392

Related CWEs

External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01

Source: ics-cert@hq.dhs.gov

https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

Timeline

No history available yet.