{"containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "IntegraXor", "vendor": "Ecava", "versions": [{"lessThan": "4.1.4410", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Andrea Micalizzi"}], "datePublic": "2014-04-29T06:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.</p>"}], "value": "Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role."}], "metrics": [{"cvssV2_0": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "description": "CWE-200", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2025-09-25T17:32:40.076Z"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.integraxor.com/blog/category/security/vulnerability-note/"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01"}, {"url": "http://www.integraxor.com/blog/category/security/vulnerability-note/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A customer notification from Ecava has been issued that details this vulnerability and provides mitigation guidance to its customers. Ecava recommends users download and install the update, IntegraXor SCADA Server 4.1.4410, from their support web site:&nbsp;<a target=\"_blank\" rel=\"nofollow\" href=\"http://www.integraxor.com/download/igsetup.msi?4.1.4410\">http://www.integraxor.com/download/igsetup.msi?4.1.4410</a></p><p>For additional information, please see Ecava\u2019s vulnerability note:&nbsp;<a target=\"_blank\" rel=\"nofollow\" href=\"http://www.integraxor.com/blog/category/security/vulnerability-note/\">http://www.integraxor.com/blog/category/security/vulnerability-note/</a></p>\n\n<br>"}], "value": "A customer notification from Ecava has been issued that details this vulnerability and provides mitigation guidance to its customers. Ecava recommends users download and install the update, IntegraXor SCADA Server 4.1.4410, from their support web site:\u00a0 http://www.integraxor.com/download/igsetup.msi?4.1.4410 \n\nFor additional information, please see Ecava\u2019s vulnerability note:\u00a0 http://www.integraxor.com/blog/category/security/vulnerability-note/"}], "source": {"advisory": "ICSA-14-091-01", "discovery": "EXTERNAL"}, "title": "Ecava IntegraXor Information Exposure", "x_generator": {"engine": "Vulnogram 0.2.0"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2014-0786", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.integraxor.com/blog/category/security/vulnerability-note/", "refsource": "CONFIRM", "url": "http://www.integraxor.com/blog/category/security/vulnerability-note/"}, {"name": "http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01", "refsource": "MISC", "url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T09:27:19.465Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.integraxor.com/blog/category/security/vulnerability-note/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2014-0786", "datePublished": "2014-05-01T01:00:00", "dateReserved": "2014-01-02T00:00:00", "dateUpdated": "2025-09-25T17:32:40.076Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*", "matchCriteriaId": "40E2214C-80FC-4973-BF67-1ECFC1C5D303", "versionEndIncluding": "4.1.4390", "vulnerable": true}, {"criteria": "cpe:2.3:a:ecava:integraxor:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "6C254168-384E-4B0A-BB22-445D7281FAC8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ecava:integraxor:4.1.4340:*:*:*:*:*:*:*", "matchCriteriaId": "E1223B72-A344-450E-8E10-1B704DF894BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ecava:integraxor:4.1.4360:*:*:*:*:*:*:*", "matchCriteriaId": "B0319EBA-C39F-4A3D-AF40-7A90FA016696", "vulnerable": true}, {"criteria": "cpe:2.3:a:ecava:integraxor:4.1.4369:*:*:*:*:*:*:*", "matchCriteriaId": "5EA3EDD6-3459-4916-B184-271A43FAC10A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ecava:integraxor:4.1.4380:*:*:*:*:*:*:*", "matchCriteriaId": "C4C3DBE0-50B6-4A39-9FA5-878951AD855E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role."}, {"lang": "es", "value": "Ecava IntegraXor anterior a 4.1.4393 permite a atacantes remotos leer credenciales en texto plano para cuentas administrativas a trav\u00e9s de declaraciones SELECT que aprovechan el rol de invitado."}], "id": "CVE-2014-0786", "lastModified": "2025-09-25T18:15:35.830", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "ics-cert@hq.dhs.gov", "type": "Secondary", "userInteractionRequired": false}, {"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-05-01T01:56:10.490", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Vendor Advisory"], "url": "http://www.integraxor.com/blog/category/security/vulnerability-note/"}, {"source": "ics-cert@hq.dhs.gov", "tags": ["Vendor Advisory"], "url": "http://www.integraxor.com/blog/category/security/vulnerability-note/"}, {"source": "ics-cert@hq.dhs.gov", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "US Government Resource"], "url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.integraxor.com/blog/category/security/vulnerability-note/"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "ics-cert@hq.dhs.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-310"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}

{}