Lucene search

IcscertCVELIST:CVE-2024-5040

HistoryMay 21, 2024 - 8:19 p.m.

CVE-2024-5040 LCDS LAquis SCADA Path Traversal

2024-05-2120:19:19

CWE-22

icscert

www.cve.org

lcds

laquis

scada

path traversal

cve-2024-5040

security vulnerability

directory access

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

CVSS4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

There are multiple ways in
LCDS LAquis SCADA for an attacker to access locations outside of their own directory.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "LAquis SCADA",
    "vendor": "LCDS",
    "versions": [
      {
        "lessThanOrEqual": "4.7.1.7",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-24-142-01

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

CVSS4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

Related for CVELIST:CVE-2024-5040