- Vendor / Project
- InduSoft
- Product
- Web Studio
- Date added
- Apr 15, 2022
- Due date
- May 6, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-22
Description
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.
Required action
Apply updates per vendor instructions.