{"id":"CVE-2014-0780","kind":"vulnerability","aliases":["CVE-2014-0780"],"related":[],"title":"InduSoft Web Studio: InduSoft Web Studio NTWebServer Directory Traversal Vulnerability","description":"InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.\n\nCISA required action: Apply updates per vendor instructions.","summary":"InduSoft Web Studio's built-in NTWebServer has a directory traversal flaw that lets remote attackers read files outside the web root. The sources say attackers can read administrative passwords stored in APP files and use them to run code.","severity":"critical","cvss":9.8,"epss":0.74679,"exploited":true,"exploited_at":"2022-04-15T00:00:00+00:00","products":[{"name":"InduSoft Web Studio","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","indusoft","industrial-control","infrastructure","scada","windows"],"not_affected_if":["no-indusoft-web-studio"],"how_to_check":null,"fix":"Apply the vendor update per CISA's required action; the specific fixed version is unknown from the sources.","status":"open","published_at":"2014-04-25T05:12:07+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:17:51+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:17:51Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor update per CISA's required action; the specific fixed version is unknown from the sources.","reach":"internet","impact":"high","summary":"InduSoft Web Studio's built-in NTWebServer has a directory traversal flaw that lets remote attackers read files outside the web root. The sources say attackers can read administrative passwords stored in APP files and use them to run code.","category":"infrastructure","who_cares":["industrial-control","scada","windows","indusoft"],"confidence":0.6,"needs_auth":"no","worst_case":"Remote attacker reads admin passwords and runs code on the HMI server","analyst_note":"Find the fixed InduSoft Web Studio version and the NTWebServer config check from the vendor advisory (Schneider Electric / ICS-CERT) linked from the CISA KEV entry.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-indusoft-web-studio"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000468,"input_tokens":2849,"output_tokens":366,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0780':13A,16A '-2014':12A,15A 'action':96C 'administr':57B,84C 'allow':79C,89C 'app':61B,87C 'appli':97C 'attack':44B,54B,81C 'built':33B 'built-in':32B 'cisa':94C 'code':68B,92C 'contain':73C 'control':24B 'cve':11A,14A 'directori':8A,38B,75C 'execut':93C 'exploit':20B 'file':46B,62B,88C 'flaw':40B 'indusoft':1A,4A,17A,21B,28B,69C 'industri':23B 'industrial-control':22B 'infrastructur':25B 'instruct':101C 'let':42B 'ntwebserv':7A,35B,72C 'outsid':47B 'password':58B,85C 'per':99C 'read':45B,56B,83C 'remot':43B,80C,91C 'requir':95C 'root':50B 'run':67B 'say':53B 'scada':26B 'sourc':52B 'store':59B 'studio':3A,6A,19A,30B,71C 'travers':9A,39B,76C 'updat':98C 'use':64B 'vendor':100C 'vulner':10A,77C 'web':2A,5A,18A,29B,49B,70C 'window':27B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2014-04-25T05:12:07+00:00","kev":{"dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2014-0780","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2014-0780","severity":null,"published_at":"2022-04-15T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T16:39:48+00:00","note":null},{"source":"epss","external_id":"CVE-2014-0780","url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0780","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2014-0780","url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0780","severity":null,"published_at":"2014-04-25T05:12:07+00:00","modified_at":"2026-06-17T00:03:37+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}