CVE-2014-0780

InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

Web Studio

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

25. Apr 2014

Ausgewertete Quellen

• Hinweis
  http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02
• Hinweis
  http://www.securityfocus.com/bid/67056
• Hinweis
  https://www.exploit-db.com/exploits/42699/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0780
• CISA
  InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
• CISA
  https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02
• NVD
  CVE-2014-0780