CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

Yangiliklar CVE Tracker Exploitlar Hujumlar Xarita

CN

CyberNewsUz

Threat Intelligence Portal

LOADING0%

O'zbek tilidagi kiberxavfsizlik portali. Yangiliklar, CVE tracker, hujumlar bazasi.

Yangiliklar

Barcha yangiliklar
Hujumlar
Zayifliklar
O'zbekiston
Jahon

Asboblar

CVE Tracker
Exploit DB
Hujumlar bazasi
Threat xarita

Loyiha

Biz haqimizda

© 2026 CyberNewsUz. Barcha huquqlar himoyalangan.

CVE Tracker ga qaytish

CVE-2014-0780

Kritik(9.8)

SP2 4 yamasidan oldin InduSoft Web Studio 7.1 da NTWebServerda kataloglarni o'tkazishda zaiflik masofaviy tajovuzkorlarga APP fayllaridagi ma'muriy parollarni o'qish va natijada aniqlanmagan veb-so'rovlar orqali o'zboshimchalik kodini bajarish imkonini beradi.

Vendor

Indusoft

Product

Web Studio

CVSS Score

9.8

Nashr sanasi

25-apr, 2014

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Manbalar

http://download.indusoft.com/71.2.4/IWS71.2.4.zip
http://www.securityfocus.com/bid/67056
https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02
https://www.exploit-db.com/exploits/42699/
http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02

Yangi kritik zaifliklar

CyberNewsUz — CVE-2014-0780