CVE-2017-6020 - AskarLabs CVE Database

CVE-2017-6020

Vendor Lcds - Leã£O Consultoria E Desenvolvimento De Sistemas Ltda Me

Product LAquis SCADA software

Weakness CWE-22 · Path traversal

Published April 17, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level.

Key dates

02Disclosure timeline

April 17, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-6020 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2026-40075 OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet CVE-2026-4092 Arbitrary File Write via Path Traversal in Google clasp leading to RCE CVE-2026-48126 Algernon: Host header path traversal in --domain mode reads files and runs Lua from parent dir CVE-2025-42919 Information Disclosure vulnerability in SAP NetWeaver Application Server Java CVE-2026-32522 WordPress WooCommerce Support Ticket System plugin < 18.5 - Arbitrary File Deletion vulnerability