What’s Vulnerable › Vulnerabilities

CVE-2014-2377: Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-09-15 · updated 2026-06-17
• Weakness: CWE-526

Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

Affected products

• Ecava IntegraXor: through 4.1.4360; through 4.1.4392

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01
• https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

Get alerted when CVE-2014-2377 or the next vulnerability affects your stack