CVE-2014-2373

Description

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Affected products

• Accuenergy / Accuenergy Acuvim II AXN-NET Ethernet modulev.3.04 – v.3.04

References

• MISChttp://www.accuenergy.com/firmware-update-axm-net
• VENDOR_ADVISORYhttps://www.cisa.gov/news-events/ics-advisories/icsa-14-275-02