239 matches found
Ecava IntegraXor信息泄露漏洞
No description provided by source...
Ecava IntegraXor igcom.dll 目录遍历任意文件写入漏洞
No description provided by source...
Ecava IntegraXor SCADA Server权限访问漏洞
No description provided by source...
Ecava IntegraXor Vulnerabilities
OVERVIEW Independent security researcher Marcus Richerson and Steven Seeley of Source Incite, working with Trend Micro’s Zero Day Initiative, independently identified vulnerabilities in Ecava’s IntegraXor application. Ecava has produced a new version to mitigate these vulnerabilities. Marcus...
Ecava IntegraXor < 4.2.4488 Privilege Escalation
Binary data scadaappecavaintegraxor424488.nbin...
CVE-2015-0990
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...
Design/Logic Flaw
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...
CVE-2015-0990
Affected product: Ecava IntegraXor SCADA Server prior to version 4.2.4488. Issue: Untrusted search path (CWE-427) allows a local attacker to escalate privileges by placing a renamed DLL in the default install directory; the DLL is loaded by the application, executing code with the application’s p...
CVE-2015-0990
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...
Ecava IntegraXor DLL Vulnerability
IntegraXor is the human-machine interface for creating and running Web-based SCADA systems. IntegraXor SCADA Server versions prior to 4.2.4488 have a security vulnerability in the handling of renamed malicious DLLs, which could allow an attacker to execute malicious code in an affected applicatio...
Network Time Protocol Vulnerabilities (Supplement Update A)
OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...
Ecava IntegraXor DLL Vulnerabilities
OVERVIEW Security researcher Praveen Darshanam has identified two DLL loading vulnerabilities in Ecava’s IntegraXor SCADA Server. Ecava has produced a patch that mitigates these vulnerabilities. Praveen Darshanam has tested the patch to validate that it resolves the vulnerabilities. AFFECTED...
Ecava IntegraXor Guest Acccount Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the "guest" user. The issue lies in the ability the retrieve all...
Ecava IntegraXor < 4.2.4458 Multiple Vulnerabilities
Binary data scadaintegraxor424458.nbin...
Ecava IntegraXor < 3.60.4081 Path Subversion Arbitrary DLL Injection Code Execution
Binary data 8403.prm...
Ecava IntegraXor < 3.6.4000.1 Directory Traversal
Binary data 8405.prm...
Ecava IntegraXor < 3.5.3900.10 Buffer Overflow
Binary data 8404.prm...
Ecava IntegraXor < 3.60.4050 Unspecified SQL Injection
Binary data 8402.prm...