CVE-2014-0780 — InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

provenance: imported · CVE: CVE-2014-0780

CVE-2014-0780: InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	InduSoft
Product	Web Studio
Date added	2022-04-15
Due date	2022-05-06
Ransomware campaign use	Unknown

Description

InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2014-0780

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-0780
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog