What’s Vulnerable › Vulnerabilities

CVE-2014-2376: Ecava IntegraXor SCADA Server SQL Injection

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-09-15 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Ecava IntegraXor: through 4.1.4392; through 4.1.4360

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
• https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Get alerted when CVE-2014-2376 or the next vulnerability affects your stack