CVE-2014-2375
Ecava IntegraXor SCADA Server External Control of File Name or Path
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
Exploit likelihood
What each source reports
CVE List Score used
Ecava IntegraXor SCADA Server External Control of File Name or Path
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
- Record
CVE-2014-2375- CVSS 2.0
- 8.3
AV:N/AC:M/Au:N/C:P/I:P/A:C - Weakness
- CWE-73
- Updated
- 2026-11-02
EUVDEUVD-2014-2412
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
- Record
EUVD-2014-2412- CVSS 2.0
- 8.3 High
AV:N/AC:M/Au:N/C:P/I:P/A:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jh8g-q4mh-fhcx No score
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows...
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
- Record
GHSA-jh8g-q4mh-fhcx- Weakness
- CWE-73
- Updated
- 2026-11-02
NVD
Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.
- Record
CVE-2014-2375- CVSS 2.0
- 8.3 High
AV:N/AC:M/Au:N/C:P/I:P/A:C - CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:N/C:P/I:P/A:C - Weakness
- CWE-73, CWE-264
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2375 is a vulnerability (CVSS 8.3) in Ecava Integraxor, published September 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. No source names a fixed version.