CVE-2013-1627

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.

Score

CVSS 2.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2013-03-11

Last modified

2024-09-17

Weaknesses

CWE-22

Affected products

• Advantech Studio (Advantech)
• Web Studio (Indusoft)

References

• http://ics-cert.us-cert.gov/pdf/ICSA-13-067-01.pdf