CVE-2014-0780

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

• CWE-22
• CWE-22
• CWE-22

• https://download.indusoft.com/71.2.4/IWS71.2.4.zipBroken Link
• https://www.securityfocus.com/bid/67056Broken Link, Third Party Advisory, VDB Entry
• https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02US Government Resource
• https://www.exploit-db.com/exploits/42699/Exploit, Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-14-107-02Patch, Third Party Advisory, US Government Resource
• https://www.securityfocus.com/bid/67056Broken Link, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/42699/Exploit, Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0780US Government Resource

Published

Apr 25, 2014

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0773The BWOCXRUN.BwocxrunCtrl.1 control contains a method named …
• CVE-2014-0774Stack-based buffer overflow in the C++ sample client in Schn…
• CVE-2014-0775Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-0777The Modbus slave/outstation driver in the OPC Drivers 1.0.20…
• CVE-2014-0778TCPUploader module listens on Port 10651/TCP for incoming co…
• CVE-2014-0779The PLC driver in ServerMain.exe in the Kepware KepServerEX …
• CVE-2014-0781Heap-based buffer overflow in BKCLogSvr.exe in Yokogawa CENT…
• CVE-2014-0782Stack-based buffer overflow in BKESimmgr.exe in the Expanded…
• CVE-2014-0783Stack-based buffer overflow in BKHOdeq.exe in Yokogawa CENTU…
• CVE-2014-0784Stack-based buffer overflow in BKBCopyD.exe in Yokogawa CENT…
• CVE-2014-0785Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-0786Ecava IntegraXor before 4.1.4393 allows remote attackers to …