CVE-2014-2374 — Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security

CVE-2014-2374

Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security PUBLISHED

Description (CNA)

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Affected (CNA)

Vendor / product	Versions
Accuenergy / Accuenergy Acuvim II AXN-NET Ethernet module	affected v.3.04

CWE

CWE-602

References

http://www.accuenergy.com/firmware-update-axm-net
https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02

ADP enrichment

CVE

No English description supplied.

http://www.accuenergy.com/firmware-update-axm-net
https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02