Lucene search

CVE-2017-6020

🗓️ 17 Apr 2018 14:00:29Reported by icscertType

Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2017-6020	17 Apr 201814:29	–	nvd
Prion	Design/Logic Flaw	17 Apr 201814:29	–	prion
Cvelist	CVE-2017-6020	17 Apr 201814:00	–	cvelist
Exploit DB	LAquis SCADA 4.1.0.2385 - Directory Traversal (Metasploit)	27 Sep 201700:00	–	exploitdb
Packet Storm	LAquis SCADA 4.1.0.2385 Directory Traversal	29 Sep 201700:00	–	packetstorm
0day.today	LAquis SCADA 4.1.0.2385 - Directory Traversal Exploit	28 Sep 201700:00	–	zdt
Zero Day Initiative	LAquis SCADA Software Web Server Directory Traversal Information Disclosure Vulnerability	12 Apr 201700:00	–	zdi
ICS	LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA	15 Jan 201912:00	–	ics

Nvd

Node

lcds laquis_scadaRange<4.1.0.3237

[
  {
    "product": "LAquis SCADA software",
    "vendor": "LCDS - LeÃ£o Consultoria e Desenvolvimento de Sistemas LTDA ME",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to version 4.1.0.3237"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-17-082-01
securityfocus	www.securityfocus.com/bid/97055
exploit-db	www.exploit-db.com/exploits/42885/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Apr 2018 14:29Current

5.3Medium risk

Vulners AI Score5.3

CVSS24

CVSS35.3

EPSS0.014

CWE-22