PT-2017-16837 · Laquis · Laquis Scada

James Fitts · Publicado 2017-04-12 · Atualizado 2019-10-09 · CVE-2017-6020

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions LAquis SCADA software versions prior to 4.1.0.3237

Description The issue concerns a directory traversal information disclosure problem. It arises because the software does not properly neutralize external input, allowing users to potentially access absolute path sequences outside of their intended privilege level.

Recommendations For LAquis SCADA software versions prior to 4.1.0.3237, update to version 4.1.0.3237 or later to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2017-6020

ZDI-17-286

Produtos afetados

Laquis Scada

Referências · 6

• 🔥 https://exploit-db.com/exploits/42885 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-6020 · Nota de Segurança
• http://securityfocus.com/bid/97055 · Nota
• https://osv.dev/vulnerability/CVE-2017-6020 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-17-082-01 · Nota
• https://zerodayinitiative.com/advisories/ZDI-17-286 · Nota de Segurança