InduSoft Web Studio NTWebServer Directory Traversal Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 15/04/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| web studio | = 7.1 |
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free