Lcds: >> Laquis Scada Security Vulnerabilities
When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.
CVSS Score
9.3
EPSS Score
0.002
Published
2022-05-25
LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users.
CVSS Score
5.5
EPSS Score
0.002
Published
2020-05-04
LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorized users
CVSS Score
7.8
EPSS Score
0.002
Published
2020-05-04
Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocated buffer, which may allow an attacker to execute remote code in the context of the current process.
CVSS Score
7.8
EPSS Score
0.002
Published
2019-03-27
LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds read, which may cause a system crash, allow data exfiltration, or remote code execution.
CVSS Score
7.8
EPSS Score
0.005
Published
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.
CVSS Score
5.3
EPSS Score
0.043
Published
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server.
CVSS Score
8.8
EPSS Score
0.004
Published
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.
CVSS Score
9.8
EPSS Score
0.007
Published
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.
CVSS Score
9.8
EPSS Score
0.007
Published
2019-02-05
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.
CVSS Score
5.3
EPSS Score
0.005
Published
2019-02-05
Page 1