VAR-202005-0047
Vulnerability from variot - Updated: 2023-12-18 12:49LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users. LCDS LAquis SCADA There is an information leakage vulnerability in.Information may be obtained. This vulnerability allows remote attackers to create arbitrary files on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of the AddComboFile method when processing LGX files. When opening an LGX file, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to execute code in the context of the current user. LCDS LAquis SCADA is a set of SCADA (Data Acquisition and Monitoring Control) system of Brazilian LCDS company. The system is mainly used for data collection and process control of equipment with communication technology.
LCDS LAquis SCADA 4.3.1 and previous versions have information disclosure vulnerabilities that attackers can use to obtain sensitive information
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202005-0047",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "scada",
"scope": null,
"trust": 3.5,
"vendor": "laquis",
"version": null
},
{
"model": "laquis scada",
"scope": "lte",
"trust": 1.0,
"vendor": "lcds",
"version": "4.3.1"
},
{
"model": "laquis scada",
"scope": "eq",
"trust": 0.9,
"vendor": "lcds",
"version": "4.3.1"
},
{
"model": "laquis scada",
"scope": "lte",
"trust": 0.6,
"vendor": "lcds",
"version": "\u003c=4.3.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "laquis scada",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:lcds:laquis_scada:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.3.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2020-10618"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Natnael Samson (@NattiSamson)",
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
}
],
"trust": 3.5
},
"cve": "CVE-2020-10618",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2020-004086",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CNVD-2020-25541",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "b696a7b5-01b0-4388-a850-54610146e78f",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"acInsufInfo": null,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULMON",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2020-10618",
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "MEDIUM",
"trust": 0.1,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "ZDI",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.8,
"id": "CVE-2020-10618",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 3.5,
"userInteraction": "REQUIRED",
"vectorString": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Local",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2020-004086",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "ZDI",
"id": "CVE-2020-10618",
"trust": 3.5,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2020-10618",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "JVNDB-2020-004086",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2020-25541",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202004-2355",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2020-10618",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users. LCDS LAquis SCADA There is an information leakage vulnerability in.Information may be obtained. This vulnerability allows remote attackers to create arbitrary files on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the handling of the AddComboFile method when processing LGX files. When opening an LGX file, the user interface fails to warn the user of unsafe actions. An attacker can leverage this vulnerability to execute code in the context of the current user. LCDS LAquis SCADA is a set of SCADA (Data Acquisition and Monitoring Control) system of Brazilian LCDS company. The system is mainly used for data collection and process control of equipment with communication technology. \n\r\n\r\nLCDS LAquis SCADA 4.3.1 and previous versions have information disclosure vulnerabilities that attackers can use to obtain sensitive information",
"sources": [
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
}
],
"trust": 5.76
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2020-10618",
"trust": 7.0
},
{
"db": "ICS CERT",
"id": "ICSA-20-119-01",
"trust": 3.1
},
{
"db": "ZDI",
"id": "ZDI-20-575",
"trust": 1.3
},
{
"db": "CNVD",
"id": "CNVD-2020-25541",
"trust": 1.0
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355",
"trust": 1.0
},
{
"db": "JVN",
"id": "JVNVU97783982",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10319",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10317",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-571",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10316",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-574",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10197",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-573",
"trust": 0.7
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-10318",
"trust": 0.7
},
{
"db": "ZDI",
"id": "ZDI-20-572",
"trust": 0.7
},
{
"db": "AUSCERT",
"id": "ESB-2020.1589",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "46599",
"trust": 0.6
},
{
"db": "IVD",
"id": "7F54C799-0A6A-4821-A63F-60BA2B9C8DC6",
"trust": 0.2
},
{
"db": "IVD",
"id": "B696A7B5-01B0-4388-A850-54610146E78F",
"trust": 0.2
},
{
"db": "VULMON",
"id": "CVE-2020-10618",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"id": "VAR-202005-0047",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
}
],
"trust": 1.5507122
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.0
}
],
"sources": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
}
]
},
"last_update_date": "2023-12-18T12:49:41.767000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "LAquis has issued an update to correct this vulnerability.",
"trust": 3.5,
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-119-01"
},
{
"title": "Top Page",
"trust": 0.8,
"url": "https://laquisscada.com/"
},
{
"title": "Patch for LCDS LAquis SCADA Information Disclosure Vulnerability (CNVD-2020-25541)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/215717"
},
{
"title": "LCDS LAquis SCADA Repair measures for information disclosure vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=117923"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 6.6,
"url": "https://www.us-cert.gov/ics/advisories/icsa-20-119-01"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2020-10618"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-10618"
},
{
"trust": 0.8,
"url": "https://jvn.jp/vu/jvnvu97783982/"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/46599"
},
{
"trust": 0.6,
"url": "https://www.zerodayinitiative.com/advisories/zdi-20-575/"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2020.1589/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/200.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/180953"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-28T00:00:00",
"db": "IVD",
"id": "7f54c799-0a6a-4821-a63f-60ba2b9c8dc6"
},
{
"date": "2020-04-28T00:00:00",
"db": "IVD",
"id": "b696a7b5-01b0-4388-a850-54610146e78f"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"date": "2020-04-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"date": "2020-05-04T00:00:00",
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"date": "2020-05-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"date": "2020-05-04T19:15:12.707000",
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"date": "2020-04-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"date": "2020-04-30T00:00:00",
"db": "ZDI",
"id": "ZDI-20-572"
},
{
"date": "2020-04-29T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-25541"
},
{
"date": "2020-05-06T00:00:00",
"db": "VULMON",
"id": "CVE-2020-10618"
},
{
"date": "2020-05-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2020-004086"
},
{
"date": "2021-09-14T14:09:27.290000",
"db": "NVD",
"id": "CVE-2020-10618"
},
{
"date": "2020-05-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "LAquis SCADA LGX File Insufficient UI Warning Arbitrary File Creation Vulnerability",
"sources": [
{
"db": "ZDI",
"id": "ZDI-20-575"
},
{
"db": "ZDI",
"id": "ZDI-20-571"
},
{
"db": "ZDI",
"id": "ZDI-20-574"
},
{
"db": "ZDI",
"id": "ZDI-20-573"
},
{
"db": "ZDI",
"id": "ZDI-20-572"
}
],
"trust": 3.5
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202004-2355"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…