CVE-2014-2373 in AXN-NET Ethernet Module
Summary
by MITRE
The web server on the AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to bypass authentication and modify settings via a direct request to an unspecified URL.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 10/14/2025
The vulnerability identified as CVE-2014-2373 represents a critical authentication bypass flaw within the AXN-NET Ethernet module accessory version 3.04, which is part of the Accuenergy Acuvim II power monitoring system. This issue affects the underlying web server implementation that serves as the primary interface for configuration and operational management of the device. The vulnerability stems from inadequate access controls and improper authentication mechanisms that fail to properly validate user credentials before granting administrative privileges. The affected system operates as a networked device that provides remote monitoring capabilities for electrical power consumption data, making it a potential target for malicious actors seeking unauthorized access to industrial control systems.
The technical exploitation of this vulnerability occurs through direct HTTP requests to unspecified URLs within the web server interface, allowing attackers to bypass the standard authentication mechanisms entirely. This type of flaw typically indicates a lack of proper session management, insufficient input validation, or missing authorization checks within the web application code. The vulnerability enables remote attackers to perform administrative actions without proper credentials, potentially allowing them to modify critical system settings, alter monitoring parameters, or access sensitive operational data. This authentication bypass vulnerability directly relates to CWE-287, which addresses improper authentication issues in software systems, and can be classified under the broader category of weak authentication mechanisms that are commonly exploited in industrial control systems.
The operational impact of this vulnerability extends beyond simple unauthorized access, as it can compromise the integrity and availability of power monitoring data within industrial environments. Attackers could potentially manipulate power consumption readings, disable monitoring alerts, or alter system configurations that could lead to operational disruptions or safety hazards. The affected Accuenergy Acuvim II system is typically deployed in critical infrastructure environments where accurate power monitoring is essential for operational efficiency and safety. The remote nature of this vulnerability means that attackers do not require physical access to the device, significantly expanding the attack surface and making the system vulnerable to exploitation from anywhere on the network. This vulnerability aligns with ATT&CK technique T1078 which covers valid accounts and T1566 which covers credential harvesting, demonstrating how such flaws can enable broader compromise of industrial control systems.
Mitigation strategies for this vulnerability should include immediate firmware updates from Accuenergy to address the authentication bypass issue, network segmentation to isolate the affected devices, and implementation of additional access controls such as firewall rules that restrict access to the web administration interface. Organizations should also implement network monitoring to detect unauthorized access attempts and establish proper change management procedures for system configurations. The vulnerability highlights the importance of secure coding practices in industrial devices and underscores the need for regular security assessments of networked industrial equipment. Additionally, implementing multi-factor authentication mechanisms and regular security audits can help prevent similar issues from occurring in other networked industrial control systems.