Back to Database
Status published
High
CVE-2014-2375
Ecava IntegraXor SCADA Server External Control of File Name or Path
Vulnerability Description
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2375
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Andrea Micalizzi
More from Ecava
View All →CVE-2014-2377
Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables
Medium
5
CVE-2014-2376
Ecava IntegraXor SCADA Server SQL Injection
High
7.5
CVE-2014-0786
Ecava IntegraXor Information Exposure
High
7.5
CVE-2014-0753
Ecava IntegraXor Stack-based Buffer Overflow
High
7.8
CVE-2014-0752
Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere
High
7.5
Affected Vendor
Ecava
View all reports →Affected Software
IntegraXor SCADA Server
Vulnerable Versions:
0
Timeline
Official Publish:
September 15th, 2014
Last Modified:
October 13th, 2025
Added to House:
July 19th, 2026