Vulnerabilities > Indusoft > WEB Studio > 7.0b2

DATE CVE VULNERABILITY TITLE RISK
2013-03-11 CVE-2013-1627 Path Traversal vulnerability in multiple products
Absolute path traversal vulnerability in NTWebServer.exe in Indusoft Studio 7.0 and earlier and Advantech Studio 7.0 and earlier allows remote attackers to read arbitrary files via a full pathname in an argument to the sub_401A90 CreateFileW function.
network
low complexity
advantech indusoft CWE-22
7.8
7.8
2011-09-02 CVE-2011-0342 Buffer Errors vulnerability in Indusoft web Studio 7.0B2
Multiple buffer overflows in the InduSoft ISSymbol ActiveX control in ISSymbol.ocx 301.1104.601.0 in InduSoft Web Studio 7.0B2 hotfix 7.0.01.04 allow remote attackers to execute arbitrary code via a long parameter to the (1) Open, (2) Close, or (3) SetCurrentLanguage method.
network
low complexity
indusoft CWE-119
critical
 10.0
10