CVE-2013-1627

2013-03-1117:55:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2013

1627

path traversal

vulnerability

ntwebserver.exe

indusoft studio

advantech studio

remote attackers

arbitrary files

nvd

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.007 Low

EPSS

Percentile

79.9%

JSON

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.

CPENameOperatorVersion
indusoft:web_studioindusoft web studioeq6.1
advantech:advantech_studioadvantech advantech studioeq6.1
indusoft:web_studioindusoft web studioeq7.0b2
indusoft:web_studioindusoft web studioeq7.0

CPE	Name	Operator	Version
indusoft:web_studio	indusoft web studio	eq	6.1
advantech:advantech_studio	advantech advantech studio	eq	6.1
indusoft:web_studio	indusoft web studio	eq	7.0b2
indusoft:web_studio	indusoft web studio	eq	7.0