Description
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ICS-CERT | LCDS Laquis SCADA | All versions prior to version 4.1.0.4150 | — |
Advisories 1
- ICSA-19-015-01 LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA CISA ICS & IT advisories · Jan 15, 2019