Summary
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, crash the system, or write controlled content to the target system.
Vulnerabilities 6
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote c…
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code …
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may a…
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution.
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input …
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow rem…
Revision history
-
#1
ICSA-18-289-01 LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA
References
-
ICS Advisory ICSA-18-289-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-289-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B