Overview
Ecava IntegraXor contains a directory traversal vulnerability
Description
According to Ecava's website: IntegraXor is a suite of tools used to create and run a web-based HMI interface for a Supervisory Control and Data Acquisition (SCADA) system. Ecava IntegraXor runs a web service that listens on port 7131/tcp. The web service in this product is vulnerable to a directory traversal vulnerability. Public exploit code is available. |
Impact
A remote attacker can access files outside of the web application or document root by supplying a crafted URL to an vulnerable system. |
Solution
Ecava has released a patch to mitigate the vulnerability and has notified its customer base of the availability of the patch. |
Restrict Access |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was publicly disclosed by Luigi Auriemma.
This document was written by Michael Orlando.
Other Information
| CVE IDs: | CVE-2010-4598 |
| Severity Metric: | 18.00 |
| Date Public: | 2010-12-21 |
| Date First Published: | 2011-01-11 |
| Date Last Updated: | 2011-01-12 18:01 UTC |
| Document Revision: | 12 |