CVE-2014-2377CWE-526

CVE-2014-2377: vulnerability in Ecava IntegraXor SCADA Server

Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

Published · Updated

Follow this CVE+ Monitor IntegraXor SCADA Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 1.8%
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected products
Ecava · IntegraXor SCADA Server
Related CVEs — Ecava IntegraXor SCADA Server

In the same product, most dangerous first.

CVE-2014-2375—Ecava IntegraXor SCADA Server External Control of File Name or PathEPSS 2.3%CVE-2014-2376—Ecava IntegraXor SCADA Server SQL InjectionEPSS 2.0%