CVEvulnerability

CVE-2014-0752

5.0 MEDIUM Published 2014-01-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264, CWE-529

Description

The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.

Affected configurations

• ecava integraxor (<= 4.1.4360) • ecava integraxor 3.5.3900.5 • ecava integraxor 3.5.3900.10 • ecava integraxor 3.6.4000.0 • ecava integraxor 3.60.4061 • ecava integraxor 3.71 • ecava integraxor 3.71.4200 • ecava integraxor 3.72 • ecava integraxor 4.00 • ecava integraxor 4.1

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-529 Exposure of Access Control List Files to an Unauthorized Control Sphere weakness

References