PT-2020-12246 · Lcds · Lcds Laquis Scada

Published 2020-04-30 · Updated 2021-09-14 · CVE-2020-10618

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LCDS LAquis SCADA versions 4.3.1 and prior

Description The affected product is vulnerable to sensitive information exposure by unauthorized users. This issue may allow unauthorized access to sensitive data.

Recommendations For versions 4.3.1 and prior, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-10618

ZDI-20-571

ZDI-20-572

ZDI-20-573

ZDI-20-574

ZDI-20-575

Affected Products

Lcds Laquis Scada

References · 9

• https://zerodayinitiative.com/advisories/ZDI-20-571 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-10618 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-573 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-574 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-575 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-572 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10618 · Vendor Advisory
• https://t.me/cvenotify/3537 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-20-119-01 · Note