CVE-2014-2377 — Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

CVE-2014-2377

Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables PUBLISHED

Description (CNA)

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

Affected (CNA)

Vendor / product	Versions
Ecava / IntegraXor SCADA Server	affected 0 through v4.1.4360; affected 0 through v4.1.4392

CWE

CWE-526

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01

ADP enrichment

CVE

No English description supplied.

https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01