PT-2014-4661 · Ecava · Integraxor Scada Server

Publicado 2014-09-15 · Atualizado 2025-10-13 · CVE-2014-2375

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier

Description The issue allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

Recommendations For Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier, update to a version later than 4.1.4360 to resolve the issue. For Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier, update to a version later than 4.1.4392 to resolve the issue. As a temporary workaround, consider disabling the CSV export feature until a patch is available.

Correção

DoS

Enumeração de Fraquezas

CWE-264

CWE-73

Identificadores relacionados

CVE-2014-2375

Produtos afetados

Integraxor Scada Server

Referências · 4

• https://cisa.gov/news-events/ics-advisories/icsa-14-224-01 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01 · Correção
• https://t.me/cveNotify/138476 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-2375 · Nota de Segurança