Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability

Vulnerabilities 1

• High 7.5
  CVE-2014-0752

  Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere

  The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.

  Ecava IntegraXor
  Jan 9, 2014

Revision history

1. 2025-06-06 #2

   Advisory converted into a CSAF

2. 2014-10-11 #1

   Initial Publication

References

• ICS Advisory ICSA-14-008-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-14-008-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014