CVE-2014-2377

CVE-2014-2377: Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

Vendor Ecava
Product IntegraXor SCADA Server
Weakness CWE-526
Published September 15, 2014
Last update October 13, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag.

Key dates

02Disclosure timeline

September 15, 2014 CVE published
October 13, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-9162 Org.keycloak/keycloak-model-storage-service: variable injection into environment variables CVE-2025-0985 IBM MQ information disclosure CVE-2024-4369 Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure CVE-2024-2700 Quarkus-core: leak of local configuration properties into quarkus applications CVE-2026-45370 python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection