Description
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ecava | IntegraXor | < 4.1.4410 | 4.1.4410 |
Advisories 2
- ICSA-14-091-01 Ecava IntegraXor Guest Account Information Disclosure Vulnerability CISA ICS & IT advisories · Jun 9, 2025
- ICSA-14-224-01 Ecava Integraxor SCADA Server Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025