CVE-2014-2377

Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

State: Published
Severity: 5.0 Medium
Published: Sep 15, 2014
Updated: Oct 13, 2025
Reserved: Mar 13, 2014

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

Scores

CVSS	Score	Vector	Source
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:N/I:P/A:N	icscert

Weaknesses

CWE-526

Affected Products

Product	Versions
IntegraXor SCADA ServerEcava	v4.1.4360 and earlierAffected v4.1.4392 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.