CVE-2018-19029: Untrusted Pointer Dereference

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2019-6523: Improper Neutralization of Special Elements used in an SQL Command

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...

CVE-2019-6519: Improper Authentication

WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...

CVE-2019-6521: Improper Authentication

WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information...

CVE-2018-18986: Out-of-bounds Write

LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds read, which may cause a system crash, allow data exfiltration, or remote code execution...

CVE-2018-19000: Authentication Bypass Using an Alternate Path or Channel

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data...

CVE-2018-18998: Use of Hard-coded Credentials

LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges...

CVE-2018-19002: Improper Control of Generation of Code

LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-19004

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration...

CVE-2018-19004

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration...

Design/Logic Flaw

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration...

CVE-2018-19004

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration...

CVE-2018-19004

Affected software/impact: LCDS LAquis SCADA prior to 4.1.0.4150 has an out-of-bounds read when opening a specially crafted project file, potentially enabling data exfiltration. Variant appears in multiple sources (NVD/NVDCV list, CNVD, ZDI advisories, and ICS-CERT). Root cause: parsing vulnerabil...

Design/Logic Flaw

LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-18988

LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-18988

LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-18988

LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-18988

LAquis SCADA LGX report handling is vulnerable (CVE-2018-18988). In LAquis LCDS/LGX processing, a specially crafted LGX report file can trigger code execution or other impacts. Connected advisories detail multiple correlated flaws: LGX/Report processing can be abused to execute scripts or spawn a...

CVE-2018-18988: Out-of-bounds Read

LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash...

CVE-2018-19004: Out-of-bounds Read

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration...