Description
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ecava | IntegraXor | ≤ 4.1.4360 | — |
Advisories 1
- ICSA-14-008-01 Ecava Sdn Bhd IntegraXor Project Directory Information Disclosure Vulnerability CISA ICS & IT advisories · Jun 6, 2025