Skip to content
OpenAdvisories
Critical · 9.3 CVE-2021-32989 EUVD-2021-19710GHSA-xqp7-9f97-535f

LCDS LAquis SCADA - Cross-site Scripting

Published May 25, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.

Affected products

VendorProductAffectedFixed
LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA All – ≤ 4.3.1.1011 —

Advisories 1

References