CVE-2014-0753

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-121 CWE-119

Affected software

Vendor	Product	Versions
Ecava	IntegraXor	<= 4.1.4380

References

http://osvdb.org/102171
http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/Patch, Vendor Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-14-016-01
http://ics-cert.us-cert.gov/advisories/ICSA-14-016-01Third Party Advisory, US Government Resource
http://osvdb.org/102171
http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/Patch, Vendor Advisory

Timeline

Published: Jan 21, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-075410.0Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Ex CVE-2014-07556.9Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project file CVE-2014-07575.0Smart Software Solutions (3S) CoDeSys Runtime Toolkit before 2.4.7.44 allows remote attackers to cause a denial of service (NULL pointer der CVE-2014-07589.3An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via CVE-2014-07595.9Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain pri CVE-2014-07609.3The Festo CECX-X-C1 Modular Master Controller with CoDeSys and CECX-X-M1 Modular Controller with CoDeSys and SoftMotion provide an undocume CVE-2014-07617.1The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process CVE-2014-07624.7The CG Automation Software DNP3 driver, used in the ePAQ-9410 Substation Gateway products, does not validate input correctly. An attacker c CVE-2014-07637.5An attacker using SQL injection may use arguments to construct queries without proper sanitization. The DBVisitor.dll is exposed through SO CVE-2014-07647.5By providing an overly long string to the NodeName parameter, an attacker may be able to overflow the static stack buffer. The attacker ma CVE-2014-07657.5To exploit this vulnerability, the attacker sends data from the GotoCmd argument to control. If the value of the argument is overly long, t CVE-2014-07667.5An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to ove