CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-04-25
InduSoft Web Studio NTWebServer Directory Traversal and Remote Code Execution Vulnerability (CVE-2014-0780) Security Advisory
[Affected Scope] NTWebServer component in InduSoft Web Studio versions prior to 7.1 SP2 Patch 4
[Impact] Unauthenticated remote attackers can exploit directory traversal to read administrative passwords in APP files, leading to arbitrary remote code execution (RCE)
[Mitigation] Upgrade InduSoft Web Studio to version 7.1 SP2 Patch 4 or later, and restrict external access to the NTWebServer port