Medium · 5.0 CVE-2014-2377 EUVD-2014-2414GHSA-3x7r-v44p-242p

Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

Published Sep 15, 2014 · Updated Oct 13, 2025 · Assigned by icscert

Vendor: Ecava Product: IntegraXor SCADA Server

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

Affected products

Vendor	Product	Affected	Fixed
Ecava	IntegraXor SCADA Server	≤ v4.1.4360, ≤ v4.1.4392	—

Advisories 1

ICSA-14-224-01 Ecava Integraxor SCADA Server Vulnerabilities CISA ICS & IT advisories · Jun 6, 2025

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01

CNA	v2.0	5.0
EUVD	v2.0	5.0