CVE-2017-6020
- State
- Published
- Severity
- Not scored
- Published
- Apr 17, 2018
- Updated
- Sep 17, 2024
- Reserved
- Feb 16, 2017
Description
Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.
Scores
The record has no CVSS score.
Weaknesses
- CWE-22 Path traversal CWE-22
Affected Products
| Product | Versions |
|---|---|
LAquis SCADA softwareLCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME |
|
References
- 42885exploit
- 97055vdb-entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.