CVE-2014-2376

Ecava IntegraXor SCADA Server SQL Injection

State: Published
Severity: 7.5 High
Published: Sep 15, 2014
Updated: Oct 13, 2025
Reserved: Mar 13, 2014

Description

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Scores

CVSS	Score	Vector	Source
2.0	7.5 High	AV:N/AC:L/Au:N/C:P/I:P/A:P	icscert

Weaknesses

CWE-89

Affected Products

Product	Versions
IntegraXor SCADA ServerEcava	v4.1.4360 and earlierAffected v4.1.4392 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.