CVE-2014-2375: Ecava IntegraXor SCADA Server External Control of File Name or Path

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-09-15 · updated 2026-06-17
Weakness: CWE-73

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

Affected products

Ecava IntegraXor: through 4.1.4360; through 4.1.4392

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Get alerted when CVE-2014-2375 or the next vulnerability affects your stack