Published: 11/03/2013 Updated: 18/03/2013

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and previous versions and Advantech Studio 7.0 and previous versions allows remote malicious users to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
indusoft web studio 6.1
advantech advantech studio 6.1
indusoft web studio 7.0b2
indusoft web studio 7.0

# Exploit Title: Advantech Studio v70 SCADA/HMI Directory Traversal 0-day # Google Dork: N/A # Date: 2012-12-03 # Exploit Author: Nin3 # Vendor Homepage: advantechcomtw # Version: 70 Build Number 0501111104020000 # Tested on: Windows # CVE : N/A ''' Advantech Studio v70 SCADA/HMI has a built in web server NTWebServerexe, the web se ...

CWE-22 http://ics-cert.us-cert.gov/pdf/ICSA-13-067-01.pdf https://nvd.nist.gov https://www.exploit-db.com/exploits/23132/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-1627

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect