Skip to content
OpenAdvisories
High · 8.3 CVE-2014-2375 EUVD-2014-2412GHSA-jh8g-q4mh-fhcx

Ecava IntegraXor SCADA Server External Control of File Name or Path

Published Sep 15, 2014 · Updated Oct 13, 2025 · Assigned by icscert

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

Affected products

VendorProductAffectedFixed
Ecava IntegraXor SCADA Server ≤ v4.1.4360, ≤ v4.1.4392 —

Advisories 1

References