2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2014-0753" ,
"sourceIdentifier" : "ics-cert@hq.dhs.gov" ,
"published" : "2014-01-21T01:55:03.620" ,
2024-11-22 19:15:24 +00:00
"lastModified" : "2024-11-21T02:02:44.850" ,
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory."
} ,
{
"lang" : "es" ,
"value" : "Desbordamiento de b\u00fafer basado en pila en el servidor SCADA en Ecava IntegraXor anterior a 4.1.4390, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del sistema) mediante la activaci\u00f3n de acceso al c\u00f3digo DLL ubicado en el directorio IntegraXor."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C" ,
2024-11-22 19:15:24 +00:00
"baseScore" : 7.8 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-11-22 19:15:24 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-119"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "4.1.4380" ,
"matchCriteriaId" : "D4C53150-2600-425B-BACB-51111E97664F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:3.5.3900.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "024F3AE4-4912-4C4C-859E-3CC832123394"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:3.5.3900.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8E4BEE8F-B1FC-47E0-BF7F-3247A29CCBFF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:3.6.4000.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B0EB4452-4772-4CA9-A119-A8DFE183CB87"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:3.60.4061:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "66CE22B5-F6B1-4CA5-8975-A0DEA0272E10"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:3.71:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8C338B7E-B958-4ED4-AF3C-B64A72CA01A6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:3.71.4200:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B6BE9299-0D5D-4FDF-8E5C-17EBB3E3D895"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:3.72:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C4717F90-420C-40C1-B465-2052F5F5D8F7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:4.00:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "04D6E69A-AE18-4B23-95CA-85C605E5F23B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:4.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6C254168-384E-4B0A-BB22-445D7281FAC8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:4.1.4360:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B0319EBA-C39F-4A3D-AF40-7A90FA016696"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:ecava:integraxor:4.1.4369:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5EA3EDD6-3459-4916-B184-271A43FAC10A"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://ics-cert.us-cert.gov/advisories/ICSA-14-016-01" ,
"source" : "ics-cert@hq.dhs.gov" ,
"tags" : [
"Third Party Advisory" ,
"US Government Resource"
]
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://osvdb.org/102171" ,
"source" : "ics-cert@hq.dhs.gov"
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/" ,
"source" : "ics-cert@hq.dhs.gov" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2024-11-22 19:15:24 +00:00
} ,
{
"url" : "http://ics-cert.us-cert.gov/advisories/ICSA-14-016-01" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory" ,
"US Government Resource"
]
} ,
{
"url" : "http://osvdb.org/102171" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}