CVE-2014-2376CWE-89

CVE-2014-2376: vulnerability in Ecava IntegraXor SCADA Server

Ecava IntegraXor SCADA Server SQL Injection

Published · Updated

Follow this CVE+ Monitor IntegraXor SCADA Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.0%
SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
Ecava · IntegraXor SCADA Server
Related CVEs — Ecava IntegraXor SCADA Server

In the same product, most dangerous first.

CVE-2014-2375—Ecava IntegraXor SCADA Server External Control of File Name or PathEPSS 2.3%CVE-2014-2377—Ecava IntegraXor SCADA Server Information Exposure Through Environmental VariablesEPSS 1.8%