CVEvulnerability
CVE-2017-6020
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-04-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
Affected configurations
• lcds laquis scada (< 4.1.0.3237)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.securityfocus.com/bid/97055 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01 Third Party Advisory, US Government Resource
- https://www.exploit-db.com/exploits/42885/ Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/97055 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01 Third Party Advisory, US Government Resource
- https://www.exploit-db.com/exploits/42885/ Third Party Advisory, VDB Entry