Ecava IntegraXor Guest Account Information Disclosure Vulnerability

🗓️ 02 Jan 2014 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 27 Views

Ecava IntegraXor Guest Account Info Disclosure Vulnerability in IntegraXor versions prior to 4.1.4410 allows remote attackers to read admin credentials. Mitigated by updating to IntegraXor SCADA Server 4.1.4410

Reporter	Title	Published	Views	Family All 12
Tenable Nessus	Ecava IntegraXor < 4.2.4458 Multiple Vulnerabilities	23 Sep 201400:00	–	nessus
Tenable Nessus	Ecava IntegraXor < 4.1.4410 Information Disclosure	2 Apr 201400:00	–	nessus
Tenable Nessus	Ecava IntegraXor < 4.2.4458 Multiple Vulnerabilities	29 Sep 201400:00	–	nessus
Circl	CVE-2014-0786	25 Sep 202517:54	–	circl
CVE	CVE-2014-0786	1 May 201401:00	–	cve
Cvelist	CVE-2014-0786 Ecava IntegraXor Information Exposure	1 May 201401:00	–	cvelist
EUVD	EUVD-2014-0817	7 Oct 202500:30	–	euvd
NVD	CVE-2014-0786	1 May 201401:56	–	nvd
OpenVAS	ECAVA IntegraXor < 4.1.4393 Account Information Disclosure Vulnerability	19 May 201400:00	–	openvas
Prion	Design/Logic Flaw	1 May 201401:56	–	prion

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2014/icsa-14-091-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-14-091-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

02 Jan 2014 07:00Current

6Medium risk

Vulners AI Score6

CVSS 25 - 7.5

EPSS0.0265