CVE-2014-2374

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Score

CVSS 2.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2014-11-05

Last modified

2025-10-13

Weaknesses

CWE-200, CWE-602

Affected products

• Accuenergy Acuvim Ii Axn-net Ethernet Module (Accuenergy)
• Acuvim Ii (Accuenergy)
• Axm-net (Accuenergy)

References

• http://www.accuenergy.com/firmware-update-axm-net
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02
• https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02