Ecava IntegraXor SCADA Server External Control of File Name or Path
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.3epss 2.3%
exploitation probability
2.3%top 18% of all CVEs
observed exploitation
nono source reports it
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
AV:N/AC:M/Au:N/C:P/I:P/A:C
Affected products
Ecava · IntegraXor SCADA Server