LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

🗓️ 16 Oct 2018 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 510 Views

LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA, vulnerabilities in LAquis SCADA, critical infrastructure sectors affected, update to Version 4.1.0.4114 recommende

Reporter	Title	Published	Views	Family All 64
BDU FSTEC	The vulnerability of the LAquis SCADA data collection and process control tool lies in the recording of data beyond the buffer boundaries in memory, allowing a intruder to execute arbitrary code.	7 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the LAquis SCADA data collection and process control tool, related to buffer overflow in memory, allows a intruder to execute arbitrary code.	7 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.	7 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the LAquis SCADA data collection and process control tool, related to buffer overflow in memory, allows a intruder to execute arbitrary code.	7 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.	7 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.	7 Nov 201800:00	–	bdu_fstec
CNVD	LAquis SCADA Remote Code Execution Vulnerability	17 Oct 201800:00	–	cnvd
CNVD	LAquis SCADA Out-of-Bounds Read Vulnerability	17 Oct 201800:00	–	cnvd
CNVD	LAquis SCADA Integer Overflow Vulnerability	17 Oct 201800:00	–	cnvd
CNVD	LAquis SCADA path traversal vulnerability (CNVD-2018-21321)	17 Oct 201800:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-289-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-18-289-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

16 Oct 2018 00:00Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 39.8

CVSS 3.17.8

EPSS0.07075