CVE-2014-0780 - InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

CVE ID:CVE-2014-0780

Project:InduSoft

Product:Web Studio

Date Added:2022-04-15Due Date:2022-05-06

Vulnerability Name

InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

Description

InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2014-0780