CVEvulnerability
CVE-2015-0990
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Description
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory.
Affected configurations
• ecava integraxor (<= 4.1.4450)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-090-02 Patch, Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-090-02 Patch, Third Party Advisory, US Government Resource