CVE-2014-2373 Information

Description

The web server on the AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to bypass authentication and modify settings via a direct request to an unspecified URL.

Reference

http://www.accuenergy.com/firmware-update-axm-net https://ics-cert.us-cert.gov/advisories/ICSA-14-275-02