Ecava Integraxor SCADA Server Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-2377US | medium5.0 | — | ||
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag. | ||||
| CVE-2014-2376US | high7.5 | — | ||
SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via… | ||||
| CVE-2014-2375US | high9.0 | — | ||
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive informatio… | ||||
| CVE-2014-0786US | medium5.0 | — | ||
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-14-224-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-224-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458 - MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458 - MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458 - MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan