PT-2014-3816 · Ecava · Integraxor

Luigi Auriemma · Publicado 2014-01-21 · Atualizado 2025-08-26 · CVE-2014-0753

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 4.1.4390

Description The issue is related to a stack-based buffer overflow in the SCADA server, which can be triggered by remote attackers to cause a denial of service, resulting in a system crash. This occurs when access is attempted to DLL code located in the IntegraXor directory.

Recommendations For versions prior to 4.1.4390, update to version 4.1.4390 or later to resolve the issue.

Correção

DoS

Buffer Overflow

Stack Overflow

Enumeração de Fraquezas

CWE-119

CWE-121

Identificadores relacionados

CVE-2014-0753

Produtos afetados

Integraxor

Referências · 7

• https://cisa.gov/news-events/ics-advisories/icsa-14-016-01 · Nota
• http://osvdb.org/102171 · Nota
• http://integraxor.com/blog/buffer-overflow-vulnerability-note · Aviso do Fabricante
• http://ics-cert.us-cert.gov/advisories/ICSA-14-016-01 · Nota
• https://t.me/cveNotify/133376 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-0753 · Nota de Segurança
• https://t.me/cveNotify/133370 · Publicação no Telegram