Unscored severity · published Mar 11, 2013
CVE-2013-1627
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Advantech Studio · Advantech
6.1; 6.1 · source: NVD
WS
Web Studio · Indusoft
6.1; 6.1; 7.0; 7.0b2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1627
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1627
ics-cert.us-cert.gov
http://ics-cert.us-cert.gov/pdf/ICSA-13-067-01.pdf
More from Advantech Studio
–
CVE-2011-0340
Multiple buffer overflows in the ISSymbol ActiveX control in ISSymbol.ocx 61.6.0.0 and 301.1009.2904.0 in the ISSymbol virtual machine, as distributed in Advantech Studio 6.1 SP6…
–
CVE-2011-0488
Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote…