Security Advisory
CVE-2014-0780
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.