Ecava IntegraXor Guest Account Information Disclosure Vulnerability

Vulnerabilities 1

• High 7.5
  CVE-2014-0786

  Ecava IntegraXor Information Exposure

  Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

  Ecava IntegraXor
  May 1, 2014

Revision history

1. 2025-06-09 #2

   Advisory converted into a CSAF

2. 2014-01-02 #1

   Initial Publication

References

• ICS Advisory ICSA-14-091-01 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014