CVE-2014-2377 - CVE House
Back to Database
Status published Medium CVE-2014-2377

Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

Vulnerability Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2377

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Andrea Micalizzi

References

More from Ecava

View All →
CVE-2014-2376
Ecava IntegraXor SCADA Server SQL Injection
High 7.5
CVE-2014-2375
Ecava IntegraXor SCADA Server External Control of File Name or Path
High 8.3
CVE-2014-0786
Ecava IntegraXor Information Exposure
High 7.5
CVE-2014-0753
Ecava IntegraXor Stack-based Buffer Overflow
High 7.8
CVE-2014-0752
Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere
High 7.5

Affected Vendor

Affected Software

IntegraXor SCADA Server
Vulnerable Versions:
0

Timeline

Official Publish: September 15th, 2014
Last Modified: October 13th, 2025
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-526

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.