Description
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ICS-CERT | LCDS Laquis SCADA | All versions prior to version 4.1.0.4150 | — |
Advisories 1
- ICSA-19-015-01 LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA CISA ICS & IT advisories · Jan 15, 2019