Lucene search

[email protected]CVE-2014-0752

HistoryJan 09, 2014 - 6:07 p.m.

CVE-2014-0752

2014-01-0918:07:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-0752

scada

ecava integraxor

remote attackers

project backup files

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.4%

JSON

The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL.

CPENameOperatorVersion
ecava:integraxorecava integraxoreq3.5.3900.10
ecava:integraxorecava integraxoreq3.60.4061
ecava:integraxorecava integraxoreq3.71.4200
ecava:integraxorecava integraxoreq3.5.3900.5
ecava:integraxorecava integraxoreq3.71
ecava:integraxorecava integraxoreq4.00
ecava:integraxorecava integraxoreq3.72
ecava:integraxorecava integraxoreq3.6.4000.0
ecava:integraxorecava integraxoreq4.1
ecava:integraxorecava integraxorle4.1.4360

CPE	Name	Operator	Version
ecava:integraxor	ecava integraxor	eq	3.5.3900.10
ecava:integraxor	ecava integraxor	eq	3.60.4061
ecava:integraxor	ecava integraxor	eq	3.71.4200
ecava:integraxor	ecava integraxor	eq	3.5.3900.5
ecava:integraxor	ecava integraxor	eq	3.71
ecava:integraxor	ecava integraxor	eq	4.00
ecava:integraxor	ecava integraxor	eq	3.72
ecava:integraxor	ecava integraxor	eq	3.6.4000.0
ecava:integraxor	ecava integraxor	eq	4.1
ecava:integraxor	ecava integraxor	le	4.1.4360

References

ics-cert.us-cert.gov/advisories/ICSA-14-008-01

www.integraxor.com/blog/category/security/vulnerability-note/

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.4%

JSON

Related for CVE-2014-0752

ics1 prion1 cvelist1