EUVD-2017-15088

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Leao Consultoria SCADA software prior to 4.1.0.3237 fails to limit external input vulnerabilities

Reporter	Title	Published	Views	Family All 10
0day.today	LAquis SCADA 4.1.0.2385 - Directory Traversal Exploit	28 Sep 201700:00	–	zdt
CVE	CVE-2017-6020	17 Apr 201814:00	–	cve
Cvelist	CVE-2017-6020	17 Apr 201814:00	–	cvelist
Exploit DB	LAquis SCADA 4.1.0.2385 - Directory Traversal (Metasploit)	27 Sep 201700:00	–	exploitdb
exploitpack	LAquis SCADA 4.1.0.2385 - Directory Traversal (Metasploit)	27 Sep 201700:00	–	exploitpack
ICS	LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA	23 Mar 201700:00	–	ics
NVD	CVE-2017-6020	17 Apr 201814:29	–	nvd
Packet Storm	LAquis SCADA 4.1.0.2385 Directory Traversal	29 Sep 201700:00	–	packetstorm
Prion	Design/Logic Flaw	17 Apr 201814:29	–	prion
Zero Day Initiative	LAquis SCADA Software Web Server Directory Traversal Information Disclosure Vulnerability	12 Apr 201700:00	–	zdi

[
  {
    "enisaIdVendor": [
      {
        "id": "3de35acd-33b7-3ee1-b1b8-9c6887489dc9",
        "vendor": {
          "name": "LCDS - LeÃ£o Consultoria e Desenvolvimento de Sistemas LTDA ME"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "94bfba77-76ac-351a-9658-ddea2598b810",
        "product": {
          "name": "LAquis SCADA software"
        },
        "product_version": "versions prior to version 4.1.0.3237"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2017-6020
exploit-db	www.exploit-db.com/exploits/42885/
securityfocus	www.securityfocus.com/bid/97055
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-17-082-01
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 35.3

CVSS 24

EPSS0.06683