Lucene search

K
cve[email protected]CVE-2014-2375
HistorySep 15, 2014 - 2:55 p.m.

CVE-2014-2375

2014-09-1514:55:00
CWE-264
web.nvd.nist.gov
25
ecava
integraxor
scada
server
remote attack
file write
file read
sensitive information
csv export
denial of service
disk consumption
nvd
cve-2014-2375

7.1 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

0.004 Low

EPSS

Percentile

73.1%

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

7.1 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

0.004 Low

EPSS

Percentile

73.1%

Related for CVE-2014-2375