Ecava IntegraXor < 4.1.4390 Buffer Overflow

high Nessus Plugin ID 72108

Synopsis

The remote Windows host contains a SCADA application that is affected by a buffer overflow vulnerability.

Description

The version of IntegraXor installed on the remote host is a version prior to 4.1 Build 4390. It is, therefore, reportedly affected by a buffer overflow vulnerability related to handling DLL files. An attacker could potentially exploit this vulnerability to cause a denial of service by system crash.

Solution

Upgrade to version 4.1.4390 or later.

See Also

http://www.nessus.org/u?a3baefb3

Plugin Details

Severity: High

ID: 72108

File Name: scada_integraxor_4_1_4390.nbin

Version: 1.52

Type: local

Family: SCADA

Published: 1/21/2014

Updated: 8/15/2022

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Temporal Vector: E:POC/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ecava:integraxor

Required KB Items: SCADA/Apps/Ecava/IntegraXor/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/16/2014

Vulnerability Publication Date: 1/15/2014

Reference Information

CVE: CVE-2014-0753

BID: 64972

ICSA: 14-016-01