Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/97055 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01 | Third Party Advisory US Government Resource |
| https://www.exploit-db.com/exploits/42885/ | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/97055 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01 | Third Party Advisory US Government Resource |
| https://www.exploit-db.com/exploits/42885/ | Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 03:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/97055 - Third Party Advisory, VDB Entry | |
| References | () https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01 - Third Party Advisory, US Government Resource | |
| References | () https://www.exploit-db.com/exploits/42885/ - Third Party Advisory, VDB Entry |
Information
Published : 2018-04-17 14:29
Updated : 2024-11-21 03:28
NVD link : CVE-2017-6020
Mitre link : CVE-2017-6020
CVE.ORG link : CVE-2017-6020
JSON object : View
Products Affected
lcds
- laquis_scada
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')