Ecava Integraxor SCADA Server Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-2377US | medium5.0 | — | ||
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag. | ||||
| CVE-2014-2376US | high7.5 | — | ||
SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via… | ||||
| CVE-2014-2375US | high9.0 | — | ||
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive informatio… | ||||
| CVE-2014-0786US | medium5.0 | — | ||
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-14-224-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-224-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458 - MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458 - MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458 - MitigationIntegraXor SCADA Server
Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: (http://www.integraxor.com/download/rc.msi?4.2.4458)
http://www.integraxor.com/download/rc.msi?4.2.4458
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan