225 matches found
Ecava IntegraXor igcom.dll 目录遍历任意文件写入漏洞
No description provided by source...
Ecava IntegraXor Vulnerabilities
OVERVIEW Independent security researcher Marcus Richerson and Steven Seeley of Source Incite, working with Trend Micro’s Zero Day Initiative, independently identified vulnerabilities in Ecava’s IntegraXor application. Ecava has produced a new version to mitigate these vulnerabilities. Marcus...
Ecava IntegraXor < 4.2.4488 Privilege Escalation
Binary data scadaappecavaintegraxor424488.nbin...
CVE-2015-0990
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...
Design/Logic Flaw
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...
CVE-2015-0990
Affected product: Ecava IntegraXor SCADA Server prior to version 4.2.4488. Issue: Untrusted search path (CWE-427) allows a local attacker to escalate privileges by placing a renamed DLL in the default install directory; the DLL is loaded by the application, executing code with the application’s p...
CVE-2015-0990
Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...
Network Time Protocol Vulnerabilities (Supplement Update A)
OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...
Ecava IntegraXor DLL Vulnerabilities
OVERVIEW Security researcher Praveen Darshanam has identified two DLL loading vulnerabilities in Ecava’s IntegraXor SCADA Server. Ecava has produced a patch that mitigates these vulnerabilities. Praveen Darshanam has tested the patch to validate that it resolves the vulnerabilities. AFFECTED...
Ecava IntegraXor Guest Acccount Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the "guest" user. The issue lies in the ability the retrieve all...
Ecava IntegraXor < 4.2.4458 Multiple Vulnerabilities
Binary data scadaintegraxor424458.nbin...
Ecava IntegraXor < 3.60.4081 Path Subversion Arbitrary DLL Injection Code Execution
Binary data 8403.prm...
Ecava IntegraXor < 3.6.4000.1 Directory Traversal
Binary data 8405.prm...
Ecava IntegraXor < 3.5.3900.10 Buffer Overflow
Binary data 8404.prm...
Ecava IntegraXor < 3.60.4050 Unspecified SQL Injection
Binary data 8402.prm...
Ecava IntegraXor < 3.60.4080 Cross-Site Scripting
Binary data 8401.prm...
Ecava IntegraXor < 4.2.4458 Multiple Vulnerabilities
Binary data 8400.prm...
Ecava IntegraXor < 3.71.4200 Directory Traversal
Binary data 8399.prm...