ACTIVELY EXPLOITED
CVE-2014-0780: InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
| Vendor | InduSoft |
|---|---|
| Product | Web Studio |
| Actively exploited | Yes |
| Added to CISA KEV | 15 Apr 2022 |
| CISA federal deadline | 6 May 2022 |
| Weakness (CWE) | CWE-22 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.