GCVE - cpe:2.3:a:ecava:integraxor:3.5.3900.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ecava:integraxor:3.5.3900.5:*:*:*:*:*:*:*

part: a version: 3.5.3900.5 update: *

Vendor	Ecava (`3108bf0d-ad30-5878-8d1d-1e63e493f424`)
Product	Integraxor (`f201fb3b-b703-5142-81ae-190005d00183`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0753`	vulnerable	2026-06-08 05:05:14.178589	Ecava IntegraXor Stack-based Buffer Overflow Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory. Published: 2014-01-21T01:00:00.000Z Updated: 2025-08-25T23:46:30.088Z Open on db.gcve.eu Reference links http://osvdb.org/102171 http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/ https://www.cisa.gov/news-events/ics-advisories/icsa-14-016-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0752`	vulnerable	2026-06-08 05:05:14.173536	Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL. Published: 2014-01-09T11:00:00.000Z Updated: 2025-08-22T22:53:01.252Z Open on db.gcve.eu Reference links http://www.integraxor.com/blog/category/security/vulnerability-note/ https://www.cisa.gov/news-events/ics-advisories/icsa-14-008-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0246`	vulnerable	2026-06-08 05:00:40.238917	Details available Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server. Published: 2012-04-02T10:00:00.000Z Updated: 2024-08-06T18:16:20.157Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48558 http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/74388 http://osvdb.org/80650	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2958`	vulnerable	2026-06-08 04:58:09.877187	Details available Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-07-28T18:00:00.000Z Updated: 2024-08-06T23:15:32.024Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/68896 http://www.integraxor.com/blog/security-issue-xss-vulnerability-note http://www.us-cert.gov/control_systems/pdf/ICSA-11-147-02.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4598`	vulnerable	2026-06-08 04:56:29.600465	Details available Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request. Published: 2010-12-23T17:00:00.000Z Updated: 2024-08-07T03:51:17.813Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/45535 http://www.integraxor.com/blog/integraxor-3-6-scada-security-issue-20101222-0323-vulnerability-note http://www.exploit-db.com/exploits/15802 http://www.vupen.com/english/advisories/2010/3304 http://secunia.com/advisories/42730	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.