CVE-2014-2375

Ecava IntegraXor SCADA Server External Control of File Name or Path

State: Published
Severity: 8.3 High
Published: Sep 15, 2014
Updated: Oct 13, 2025
Reserved: Mar 13, 2014

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

Scores

CVSS	Score	Vector	Source
2.0	8.3 High	AV:N/AC:M/Au:N/C:P/I:P/A:C	icscert

Weaknesses

CWE-73

Affected Products

Product	Versions
IntegraXor SCADA ServerEcava	v4.1.4360 and earlierAffected v4.1.4392 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.