Description
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
InduSoft Web Studio
Default version status: unaffected
7.1affected
References
- https://www.exploit-db.com/exploits/42699/ ↗
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02 ↗
- http://www.securityfocus.com/bid/67056 ↗
- http://download.indusoft.com/71.2.4/IWS71.2.4.zip ↗
- http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02 ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0780 ↗