Vulnerabilities > CVE-2015-0990 - Unspecified vulnerability in Ecava Integraxor

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

ecava

NVD

Published: 2015-04-03

Updated: 2024-11-21

Summary

Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory.

Vulnerable Configurations

Part	Description	Count
Application	Ecava Ecava Integraxor 3.5.3900.5 Ecava Integraxor 3.5.3900.10 Ecava Integraxor 3.6.4000.0 Ecava Integraxor 3.60.4061 Ecava Integraxor 3.71 Ecava Integraxor 3.71.4200 Ecava Integraxor 3.72 Ecava Integraxor 4.00 Ecava Integraxor 4.1 Ecava Integraxor 4.1.4340 Ecava Integraxor 4.1.4360 Ecava Integraxor 4.1.4369 Ecava Integraxor 4.1.4380 Ecava Integraxor 4.1.4390 Ecava Integraxor 4.1.4393 Ecava Integraxor 4.1.4450	16

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-090-02
https://ics-cert.us-cert.gov/advisories/ICSA-15-090-02