Description
Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long request to TCP port 80.
Advisories 1
- ICSA-10-337-01 Advantech Studio Test Web Server Buffer Overflow CISA ICS & IT advisories · Jun 5, 2025
References
- 42903 third-party-advisory
- 70396 vdb-entry
- http://www.indusoft.com/blog/?p=337
- VU#506864 third-party-advisory
- ADV-2011-0093 vdb-entry
- http://downloadt.advantech.com/download/downloadsr.aspx?File_Id=1-I1D7QD
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-337-01.pdf
- ADV-2011-0092 vdb-entry
- http://www.advantechdirect.com/emarketingprograms/AStudio_Patch/AStudio_Patch.htm
- 42883 third-party-advisory
- 45783 vdb-entry
- indusoft-ntwebserver-bo(64678) vdb-entry