« Volver al listado

CVE-2014-0753

Estado: ModificadaAlta (7.8)—

Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ecava — Integraxor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0753",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Secondary",
        "source": "ics-cert@hq.dhs.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "Ecava",
          "product": "IntegraXor",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "4.1.4380"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2014-01-21T01:55:03.620",
  "references": [
    {
      "url": "http://osvdb.org/102171",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-016-01",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-016-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/102171",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-121"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en el servidor SCADA en Ecava IntegraXor anterior a  4.1.4390, permite a atacantes remotos provocar una denegación de servicio (caída del sistema) mediante la activación de acceso al código DLL ubicado en el directorio IntegraXor."
    }
  ],
  "lastModified": "2026-06-17T00:03:34.633",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4C53150-2600-425B-BACB-51111E97664F",
              "versionEndIncluding": "4.1.4380"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.5.3900.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "024F3AE4-4912-4C4C-859E-3CC832123394"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.5.3900.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E4BEE8F-B1FC-47E0-BF7F-3247A29CCBFF"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.6.4000.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0EB4452-4772-4CA9-A119-A8DFE183CB87"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.60.4061:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66CE22B5-F6B1-4CA5-8975-A0DEA0272E10"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.71:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C338B7E-B958-4ED4-AF3C-B64A72CA01A6"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.71.4200:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6BE9299-0D5D-4FDF-8E5C-17EBB3E3D895"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:3.72:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4717F90-420C-40C1-B465-2052F5F5D8F7"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:4.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04D6E69A-AE18-4B23-95CA-85C605E5F23B"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C254168-384E-4B0A-BB22-445D7281FAC8"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:4.1.4360:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0319EBA-C39F-4A3D-AF40-7A90FA016696"
            },
            {
              "criteria": "cpe:2.3:a:ecava:integraxor:4.1.4369:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EA3EDD6-3459-4916-B184-271A43FAC10A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}