PT-2023-9498 · Unknown · Laquis Scada
Natnael Samson
·
Publicado
2023-11-15
·
Atualizado
2024-05-22
·
CVE-2024-5040
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
LAquis SCADA (affected versions not specified)
Description
The issue is related to the LAquis SCADA system, where an attacker can access locations outside of their own directory. This is due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow an attacker to read, modify, or delete data, or execute arbitrary code.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Laquis Scada