VIR Vulnerability Intelligence Relay

CVE-2014-2373

high
Published 2014-11-05 · Modified 2026-05-06
CVSS v3
—
CVSS v2
7.5
VIR risk
7.5

Description

The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: ics-cert@hq.dhs.gov — http://www.accuenergy.com/firmware-update-axm-net

References

CWEs

CWE-602 CWE-287

Verify integrity in audit chain (admin only). AS-IS.