CVE-2014-2377

Published: Sep 15, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

Affected (2)

Products: Ecava: Integraxor

Ecava

1 product

Integraxor

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ecava Integraxor	Up to 4.1.4360

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Ecava Integraxor	Up to 4.1.4392

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CWE-526

Cleartext Storage of Sensitive Information in an Environment Variable

The product uses an environment variable to store unencrypted sensitive information.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01

Source: ics-cert@hq.dhs.gov

https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.