CVE-2017-6020
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 8.7%
from disclosure to weapon0 days
Published on NVDApr 17
1st PoCSep 27
exploitation probability
8.7%top 5% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
Affected products
LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME · LAquis SCADA softwarepublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/42885unverifiedcve_referencewww.exploit-db.com/exploits/42885/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.