Description (CNA)
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| InduSoft / Web Studio | affected 7.1 |
CWE
CWE-22
References
- https://www.exploit-db.com/exploits/42699/
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02
- http://www.securityfocus.com/bid/67056
- http://download.indusoft.com/71.2.4/IWS71.2.4.zip
ADP enrichment
No English description supplied.
No English description supplied.