Every CVE Search/ Get API key

CVE-2014-2374

Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security

7.5

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Exploit likelihood

1.90%Up 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.5

Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Record
CVE-2014-2374
CVSS 2.0
7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-602
Updated
2026-11-02
EUVDEUVD-2014-2411 7.5

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Record
EUVD-2014-2411
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-vcrj-h233-mj6m No score

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers...

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Record
GHSA-vcrj-h233-mj6m
Weakness
CWE-200, CWE-602
Updated
2026-11-02
NVD 7.5

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Record
CVE-2014-2374
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-602, CWE-200
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-2374 is a vulnerability (CVSS 7.5) in Accuenergy Acuvim Ii, published November 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. No source names a fixed version.

References

MoveEnter Open