Lcds: >> Laquis Scada Security Vulnerabilities
LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash.
CVSS Score
7.8
EPSS Score
0.005
Published
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.
CVSS Score
7.8
EPSS Score
0.005
Published
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration.
CVSS Score
3.3
EPSS Score
0.001
Published
2019-02-01
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash.
CVSS Score
8.8
EPSS Score
0.011
Published
2019-02-01
LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution.
CVSS Score
8.8
EPSS Score
0.084
Published
2018-10-17
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.
CVSS Score
7.8
EPSS Score
0.003
Published
2018-10-17
LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution.
CVSS Score
7.8
EPSS Score
0.007
Published
2018-10-17
LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.
CVSS Score
9.8
EPSS Score
0.069
Published
2018-10-17
LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution.
CVSS Score
9.8
EPSS Score
0.065
Published
2018-10-17
LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may allow remote code execution.
CVSS Score
9.8
EPSS Score
0.112
Published
2018-10-17