CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-32989

When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.6%

CVSS Severity

CVSS v3 Score 9.3

CVSS v2 Score 4.3

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-04
https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-04

Products affected by CVE-2021-32989

Lcds » Laquis Scada » Version: 4.1

cpe:2.3:a:lcds:laquis_scada:4.1
Lcds » Laquis Scada » Version: 4.1.0.3391

cpe:2.3:a:lcds:laquis_scada:4.1.0.3391
Lcds » Laquis Scada » Version: 4.1.0.3870

cpe:2.3:a:lcds:laquis_scada:4.1.0.3870
Lcds » Laquis Scada » Version: 4.1.0.4150

cpe:2.3:a:lcds:laquis_scada:4.1.0.4150
Lcds » Laquis Scada » Version: 4.3.1

cpe:2.3:a:lcds:laquis_scada:4.3.1
Lcds » Laquis Scada » Version: 4.3.1.1011

cpe:2.3:a:lcds:laquis_scada:4.3.1.1011

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32989

Products

Pricing

Contact Us