PT-2011-3461 · Indusoft · Indusoft Web Studio+1

Publicado 2011-05-04 · Atualizado 2011-05-31 · CVE-2011-1900

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions InduSoft Web Studio versions 6.1 through 7.0

Description A directory traversal issue in NTWebServer allows remote attackers to execute arbitrary code via an invalid request.

Recommendations For InduSoft Web Studio version 6.1, apply Patch 1 to version 7.0 to resolve the issue. For InduSoft Web Studio versions 7.x before 7.0+Patch 1, apply Patch 1 to version 7.0 to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-1900

Produtos afetados

Indusoft Web Studio

Ntwebserver

Referências · 3

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/scada/indusoft_ntwebserver_fileaccess.rb · Exploit
• http://indusoft.com/hotfixes/hotfixes.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1900 · Nota de Segurança