CVE-2014-2373

Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security

State: Published
Severity: 7.5 High
Published: Nov 5, 2014
Updated: Oct 13, 2025
Reserved: Mar 13, 2014

Description

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Scores

CVSS	Score	Vector	Source
2.0	7.5 High	AV:N/AC:L/Au:N/C:P/I:P/A:P	icscert

Weaknesses

CWE-602

Affected Products

Product	Versions
Accuenergy Acuvim II AXN-NET Ethernet moduleAccuenergy	v.3.04Affected

References

http://www.accuenergy.com/firmware-update-axm-net
https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02
https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.