← back
CVE-2017-6020

CVE-2017-6020

EPSS 8.7%CWE-22
Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
Affected products
LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME · LAquis SCADA software
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/42885/unverifiedexploitdbwww.exploit-db.com/exploits/42885unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01https://www.exploit-db.com/exploits/42885/http://www.securityfocus.com/bid/97055