Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

CVE-2014-2377 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2014-2377

CVE-2014-2377

UNKNOWN

Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

Published Sep 15, 2014

Modified 8 months ago

Details

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

References

https://ics-cert.us-cert.gov/advisories/ICSA-14-224-01

https://www.cisa.gov/news-events/ics-advisories/icsa-14-224-01

https://www.cve.org/CVERecord?id=CVE-2014-2377

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedSep 15, 2014

ModifiedOct 13, 2025