Skip to content
OpenAdvisories
High ICSA-14-224-01 4 CVEs

Ecava Integraxor SCADA Server Vulnerabilities

Published May 15, 2014 · Updated Jun 6, 2025 · Revision 2

Vendor: Ecava Product: IntegraXor SCADA Server

Vulnerabilities 4

  • High 8.3
    CVE-2014-2375

    Ecava IntegraXor SCADA Server External Control of File Name or Path

    Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

    Ecava IntegraXor SCADA Server
  • High 7.5
    CVE-2014-0786

    Ecava IntegraXor Information Exposure

    Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

    Ecava IntegraXor
  • High 7.5
    CVE-2014-2376

    Ecava IntegraXor SCADA Server SQL Injection

    SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    Ecava IntegraXor SCADA Server
  • Medium 5.0
    CVE-2014-2377

    Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

    Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

    Ecava IntegraXor SCADA Server

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References