Skip to content
OpenAdvisories

Vendor

Ecava

6 known vulnerabilities.

Products

IntegraXor 3 IntegraXor SCADA Server 3 WebSCADA (WS100) 0 WebSCADA (WS200) 0 Easy Connect (EC150) 0 Modbus RTU – TCP Gateway (MB100) 0 Serial Ethernet Server (SS100) 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.3
    CVE-2014-2375

    Ecava IntegraXor SCADA Server External Control of File Name or Path

    Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

    Ecava IntegraXor SCADA Server
  • High 7.5
    CVE-2014-2376

    Ecava IntegraXor SCADA Server SQL Injection

    SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    Ecava IntegraXor SCADA Server
  • High 7.5
    CVE-2014-0786

    Ecava IntegraXor Information Exposure

    Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

    Ecava IntegraXor
  • High 7.8
    CVE-2014-0753

    Ecava IntegraXor Stack-based Buffer Overflow

    Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory.

    Ecava IntegraXor
  • High 7.5
    CVE-2014-0752

    Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere

    The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.

    Ecava IntegraXor