CVE-2013-1627

Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:N/A:N
icscertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
advantechadvantech_studio
6.1
advantechadvantech_studio
6.1:sp6_61.6.01.05
indusoftweb_studio
6.1
indusoftweb_studio
6.1:sp6
indusoftweb_studio
7.0
indusoftweb_studio
7.0b2:b2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://ics-cert.us-cert.gov/pdf/ICSA-13-067-01.pdf
http://ics-cert.us-cert.gov/pdf/ICSA-13-067-01.pdf