LCDS LAquis SCADA

Summary

Vulnerabilities 1

• Critical 9.3
  CVE-2021-32989

  LCDS LAquis SCADA - Cross-site Scripting

  When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.

  LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
  May 25, 2022

Revision history

1. 2021-07-27 #1

   ICSA-21-208-04 LCDS LAquis SCADA

References

• ICS Advisory ICSA-21-208-04 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-21-208-04
• Recommended Practices
  https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B