var-202005-0047
Vulnerability from variot
LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users. LCDS LAquis SCADA There is an information leakage vulnerability in.Information may be obtained. This vulnerability allows remote attackers to create arbitrary files on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of the AddComboFile method when processing LGX files. When opening an LGX file, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to execute code in the context of the current user. LCDS LAquis SCADA is a set of SCADA (Data Acquisition and Monitoring Control) system of Brazilian LCDS company. The system is mainly used for data collection and process control of equipment with communication technology.
LCDS LAquis SCADA 4.3.1 and previous versions have information disclosure vulnerabilities that attackers can use to obtain sensitive information
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202005-0047",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "scada",
"scope": null,
"trust": 3.5,
"vendor": "laquis",
"version": null
},
{
"model": "laquis scada",
"scope": "lte",
"trust": 1.0,
"vendor": "lcds",
"version": "4.3.1"
},
{
"model": "laquis scada",
"scope": "eq",
"trust": 0.9,
"vendor": "lcds",
"version": "4.3.1"
},
{
"model": "laquis scada",
"scope": "lte",
"trust": 0.6,
"vendor": "lcds",
"version": "\u003c=4.3.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "laquis scada",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:lcds:laquis_scada:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.3.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2020-10618"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Natnael Samson (@NattiSamson)",
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
}
],
"trust": 3.5
},
"cve": "CVE-2020-10618",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2020-004086",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CNVD-2020-25541",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "b696a7b5-01b0-4388-a850-54610146e78f",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"acInsufInfo": null,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULMON",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2020-10618",
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "MEDIUM",
"trust": 0.1,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "ZDI",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.8,
"id": "CVE-2020-10618",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 3.5,
"userInteraction": "REQUIRED",
"vectorString": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2020-004086",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "ZDI",
"id": "CVE-2020-10618",
"trust": 3.5,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2020-10618",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "JVNDB-2020-004086",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2020-25541",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202004-2355",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2020-10618",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users. LCDS LAquis SCADA There is an information leakage vulnerability in.Information may be obtained. This vulnerability allows remote attackers to create arbitrary files on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of the AddComboFile method when processing LGX files. When opening an LGX file, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to execute code in the context of the current user. LCDS LAquis SCADA is a set of SCADA (Data Acquisition and Monitoring Control) system of Brazilian LCDS company. The system is mainly used for data collection and process control of equipment with communication technology. \n\r\n\r\nLCDS LAquis SCADA 4.3.1 and previous versions have information disclosure vulnerabilities that attackers can use to obtain sensitive information",
"sources": [
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
}
],
"trust": 5.76
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2020-10618",
"trust": 7.0
},
{
"db": "ICS CERT",
"id": "ICSA-20-119-01",
"trust": 3.1
},
{
"db": "ZDI",
"id": "ZDI-20-575",
"trust": 1.3
},
{
"db": "CNVD",
"id": "CNVD-2020-25541",
"trust": 1.0
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355",
"trust": 1.0
},
{
"db": "JVN",
"id": "JVNVU97783982",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10319",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10317",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-571",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10316",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-574",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10197",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-573",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10318",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-572",
"trust": 0.7
},
{
"db": "AUSCERT",
"id": "ESB-2020.1589",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "46599",
"trust": 0.6
},
{
"db": "IVD",
"id": "7F54C799-0A6A-4821-A63F-60BA2B9C8DC6",
"trust": 0.2
},
{
"db": "IVD",
"id": "B696A7B5-01B0-4388-A850-54610146E78F",
"trust": 0.2
},
{
"db": "VULMON",
"id": "CVE-2020-10618",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"id": "VAR-202005-0047",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
}
],
"trust": 1.5507122
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.0
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
}
]
},
"last_update_date": "2023-12-18T12:49:41.767000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "LAquis has issued an update to correct this vulnerability.",
"trust": 3.5,
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-119-01"
},
{
"title": "Top Page",
"trust": 0.8,
"url": "https://laquisscada.com/"
},
{
"title": "Patch for LCDS LAquis SCADA Information Disclosure Vulnerability (CNVD-2020-25541)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/215717"
},
{
"title": "LCDS LAquis SCADA Repair measures for information disclosure vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=117923"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 6.6,
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-119-01"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2020-10618"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-10618"
},
{
"trust": 0.8,
"url": "https://jvn.jp/vu/jvnvu97783982/"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/46599"
},
{
"trust": 0.6,
"url": "https://www.zerodayinitiative.com/advisories/zdi-20-575/"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2020.1589/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/200.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/180953"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-28T00:00:00",
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"date": "2020-04-28T00:00:00",
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"date": "2020-04-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"date": "2020-05-04T00:00:00",
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"date": "2020-05-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"date": "2020-05-04T19:15:12.707000",
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"date": "2020-04-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"date": "2020-04-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"date": "2020-05-06T00:00:00",
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"date": "2020-05-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"date": "2021-09-14T14:09:27.290000",
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"date": "2020-05-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability",
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
}
],
"trust": 3.5
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
],
"trust": 0.6
}
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.