CVE-2014-2374 - Vulnerability Details - OpenCVE

Description

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Published: 2014-11-05

Score: 7.5 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Accuenergy

Accuenergy Acuvim II AXN-NET Ethernet module

unaffected

Version	Status	Constraints
`v.3.04`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:accuenergy:axm-net:3.04:*:*:*:*:*:*:*

cpe:2.3:h:accuenergy:acuvim_ii:-:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

Vendor Solution

Accuenergy has produced a patch to mitigate these vulnerabilities. The patch can be downloaded at the following location: http://www.accuenergy.com/firmware-update-axm-net

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2014-2411	The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00657.

Key SSVC decision points have not yet been added.

References

Link	Providers
http://www.accuenergy.com/firmware-update-axm-net
https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02
https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02

History

Mon, 13 Oct 2025 23:00:00 +0000

Type	Values Removed	Values Added
Title		Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security
Weaknesses		CWE-602
References		https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02

Subscriptions

Accuenergy Acuvim Ii Axm-net

MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2014-11-05T11:00:00.000Z

Updated: 2025-10-13T22:40:16.562Z

Reserved: 2014-03-13T00:00:00.000Z

Link: CVE-2014-2374

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2014-11-05T11:55:04.683

Modified: 2025-10-13T23:15:34.700

Link: CVE-2014-2374

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

{"containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Accuenergy Acuvim II AXN-NET Ethernet module", "vendor": "Accuenergy", "versions": [{"status": "affected", "version": "v.3.04"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Laisvis Lingvevicius"}], "datePublic": "2014-10-30T06:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>\nThe AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.\n\n</p>"}], "value": "The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript."}], "metrics": [{"cvssV2_0": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-602", "description": "CWE-602", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert", "dateUpdated": "2025-10-13T22:40:16.562Z"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.accuenergy.com/firmware-update-axm-net"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Accuenergy has produced a patch to mitigate these vulnerabilities. The patch can be downloaded at the following location: <a target=\"_blank\" rel=\"nofollow\" href=\"http://www.accuenergy.com/firmware-update-axm-net\">http://www.accuenergy.com/firmware-update-axm-net</a></p>"}], "value": "Accuenergy has produced a patch to mitigate these vulnerabilities. The patch can be downloaded at the following location:\u00a0 http://www.accuenergy.com/firmware-update-axm-net"}], "source": {"advisory": "ICSA-14-275-02", "discovery": "EXTERNAL"}, "title": "Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security", "x_generator": {"engine": "Vulnogram 0.2.0"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "ID": "CVE-2014-2373", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The web server on the AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to bypass authentication and modify settings via a direct request to an unspecified URL."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.accuenergy.com/firmware-update-axm-net", "refsource": "CONFIRM", "url": "http://www.accuenergy.com/firmware-update-axm-net"}, {"name": "https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T10:14:25.880Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.accuenergy.com/firmware-update-axm-net"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2014-2374", "datePublished": "2014-11-05T11:00:00.000Z", "dateReserved": "2014-03-13T00:00:00.000Z", "dateUpdated": "2025-10-13T22:40:16.562Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:accuenergy:axm-net:3.04:*:*:*:*:*:*:*", "matchCriteriaId": "A4C52B8D-C29F-49DC-81E8-315FB958306C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:accuenergy:acuvim_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4E4D960-0F18-429C-9344-7581B2F0A3B6", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript."}, {"lang": "es", "value": "El accesorio del m\u00f3dulo AXN-NET Ethernet 3.04 para Accuenergy Acuvim II permite a atacantes remotos descubrir contrase\u00f1as y modificar configuraciones a trav\u00e9s de vectores que involucran JavaScript."}], "id": "CVE-2014-2374", "lastModified": "2025-10-13T23:15:34.700", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "ics-cert@hq.dhs.gov", "type": "Secondary", "userInteractionRequired": false}, {"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-11-05T11:55:04.683", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.accuenergy.com/firmware-update-axm-net"}, {"source": "ics-cert@hq.dhs.gov", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.accuenergy.com/firmware-update-axm-net"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-602"}], "source": "ics-cert@hq.dhs.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Secondary"}]}