CVEvulnerability
CVE-2014-2376
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-09-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected configurations
• ecava integraxor (<= 4.1.4392)
• ecava integraxor (<= 4.1.4360)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01 www.cisa.gov
- https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01 Patch, Third Party Advisory, US Government Resource