225 matches found
CVE-2014-0786 Ecava IntegraXor Information Exposure
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role...
IntegraXor账户信息泄漏漏洞
Bugtraq ID:66554 Ecava IntegraXor是一款使用HTML和SVG的人机接口产品。 Ecava IntegraXor存在未明错误，允许攻击者利用漏洞获取敏感账户信息。 0 IntegraXor 4.x Ecava IntegraXor 4.1 build 4410版本已修复该漏洞，建议用户下载使用： http://www.integraxor.com...
Ecava IntegraXor Account Information Disclosure Vulnerability
Ecava IntegraXor is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Ecava IntegraXor < 4.1.4410 Information Disclosure
Binary data scadaintegraxor414410.nbin...
Ecava IntegraXor < 4.1.4369 Project Directory Information Disclosure
Binary data scadaintegraxor414369.nbin...
Stack overflow
Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service system crash by triggering access to DLL code located in the IntegraXor directory...
CVE-2014-0753
Ecava IntegraXor SCADA server (Ecava IntegraXor) is affected by CVE-2014-0753. The stack-based buffer overflow affects versions prior to 4.1.4390 and can be exploited remotely by triggering access to DLL code in the IntegraXor directory, potentially causing a denial of service (system crash). The...
PT-2014-3816 · Ecava · Integraxor
Name of the Vulnerable Software and Affected Versions: Ecava IntegraXor versions prior to 4.1.4390 Description: The issue is related to a stack-based buffer overflow in the SCADA server, which can be triggered by remote attackers to cause a denial of service, resulting in a system crash. This...
Ecava IntegraXor < 4.1.4390 Buffer Overflow
Binary data scadaintegraxor414390.nbin...
Zero Day Vulnerability Patched in SCADA HMI Software
Malaysian SCADA software company Ecava released a patch yesterday for a zero-day vulnerability in its flagship human machine interface HMI that was publicly disclosed at a conference this week. The patch repairs a buffer overflow vulnerability in the company’s IntegraXor Web-based HMI software. H...
CVE-2014-0752
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL...
Code injection
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL...
CVE-2014-0752 Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere
The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL...
CVE-2014-0752
The CVE-2014-0752 case concerns Ecava IntegraXor SCADA server prior to 4.1.4369, where the project directory contains files that can be downloaded via a crafted URL due to improper access control. This leads to disclosure of project backup files (partial confidentiality impact) and is exploitable...
Ecava IntegraXor Guest Account Information Disclosure Vulnerability
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on April 1, 2014, and is now being released to the NCCIC/ICS-CERT web site. Independent researcher Andrea Micalizzi, aka rgod, has identified an information disclosure vulnerability in the Ecava IntegraXor...
Ecava IntegraXor Project Directory Information Disclosure Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the storing of credentials in cleartext. The issue lies in the ability to bypass file...
Ecava IntegraXor ActiveX Buffer Overflow
Overview This advisory provides mitigation details for a vulnerability that impacts the Ecava IntegraXor application. Independent researcher Andrew Brooks has identified a buffer overflow vulnerability in Ecava’s IntegraXor application. Ecava has produced a patch that mitigates this vulnerability...
Ecava IntegraXor XSS
Overview ICS-CERT received a report from an anonymous security reseacher concerning several cross site scripting XSS vulnerabilities in the Ecava IntegraXor SCADA product. ICS-CERT has worked with the reseacher and Ecava to validate these vulnerabilities. Ecava has developed a patch release of...