PT-2014-4662 · Ecava · Ecava Integraxor Scada Server

Publicado 2014-09-15 · Atualizado 2025-10-13 · CVE-2014-2376

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands.

Recommendations For Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier, update to a version later than 4.1.4360. For Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier, update to a version later than 4.1.4392.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-2376

Produtos afetados

Ecava Integraxor Scada Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-2376 · Nota de Segurança
• https://cisa.gov/news-events/ics-advisories/icsa-14-224-01 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01 · Correção
• https://t.me/cveNotify/138477 · Publicação no Telegram