Back
CVE-2014-2375
Ecava IntegraXor SCADA Server External Control of File Name or Path
High8.3EPSS 2.3%
- Published
- Updated
- Reserved
- Assigned by
- icscert
Description
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| icscertCNA (assigner) | 2.0 | High8.3 | AV:N/AC:M/Au:N/C:P/I:P/A:C |
| NVDNVD · Modified | 2.0 | High9.0 | AV:N/AC:L/Au:N/C:P/I:P/A:C |
- EPSS (exploitation in 30 days)
- 2.3% · top 17% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.3.
Weakness
Affected products
Ecava · IntegraXor SCADA Server
- affected ≤ v4.1.4360
- affected ≤ v4.1.4392
What to do
Solution: Ecava has produced a patch to address all four vulnerabilities identified. The patch can be downloaded from: http://www.integraxor.com/download/rc.msi?4.2.4458
References (2)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-2375)Record last updated .