PT-2014-4661 · Ecava · Integraxor Scada Server

Published 2014-09-15 · Updated 2025-10-13 · CVE-2014-2375

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier

Description The issue allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

Recommendations For Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier, update to a version later than 4.1.4360 to resolve the issue. For Ecava IntegraXor SCADA Server Beta versions 4.1.4392 and earlier, update to a version later than 4.1.4392 to resolve the issue. As a temporary workaround, consider disabling the CSV export feature until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-264

CWE-73

Related Identifiers

CVE-2014-2375

Affected Products

Integraxor Scada Server

References · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-2375 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-14-224-01 · Note
• https://t.me/cveNotify/138476 · Telegram Post