CVE-2014-0780: InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-15. EPSS: 74.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

Affected products

• InduSoft Web Studio: version 7.1 only

Published 2014-04-25. Last modified 2026-06-17.