CVE-2017-6020CWE-22

CVE-2017-6020: vulnerability in LCDS - Leão Consultoria e Desenvolvimento de…

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 8.5%
from disclosure to weaponsame day
Published on NVDApr 17
1st PoCSep 27
Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.