Описание
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:advantech:advantech_studio:6.1:*:*:*:*:*:*:*
cpe:2.3:a:advantech:advantech_studio:6.1:sp6_61.6.01.05:*:*:*:*:*:*
cpe:2.3:a:indusoft:web_studio:6.1:*:*:*:*:*:*:*
cpe:2.3:a:indusoft:web_studio:6.1:sp6:*:*:*:*:*:*
cpe:2.3:a:indusoft:web_studio:7.0:*:*:*:*:*:*:*
cpe:2.3:a:indusoft:web_studio:7.0b2:hotfix7.0.01.04:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.08978
Низкий
7.8 High
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.
EPSS
Процентиль: 92%
0.08978
Низкий
7.8 High
CVSS2
Дефекты
CWE-22