CVE-2017-6020 Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize e

What is CVE-2017-6020?

CVE-2017-6020 is a medium-severity vulnerability in LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA software, published on 17 Apr 2018.

Official description

Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.

Weakness: CWE-22

Which versions are affected by CVE-2017-6020?

It affects 1 product.

Products include Lcds Laquis Scada.

How do I fix CVE-2017-6020?

No fix has been published for CVE-2017-6020 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-6020 being exploited?

There is no known exploitation of CVE-2017-6020 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA software

• CVE-2018-18996 Missing authorization in LCDS Laquis SCADA Critical 9.8
• CVE-2018-18998 Hardcoded credentials in LCDS Laquis SCADA Critical 9.8
• CVE-2018-17893 Null dereference in LAquis SCADA Critical 9.8
• CVE-2018-17895 Memory corruption in LAquis SCADA Critical 9.8
• CVE-2018-17897 Integer overflow in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-46mc-xp8v-mrp8.