CVE-2018-17897

LAquis SCADA versions 4.1.0.3870 and earlier contain integer overflow to buffer overflow vulnerabilities in LQS file parsing (CVE-2018-17897) that may allow remote code execution. Root cause is overflow during memory write when processing LQS data. Impact is remote code execution with potential s...

CVE-2018-17901

The CVE-2018-17901 entry concerns LAquis SCADA (versions 4.1.0.3870 and earlier). It describes a vulnerability in processing project files where input is not sanitized before write operations on a stack object, potentially allowing code to be executed in the context of the current process. Docume...

CVE-2018-17911

CVE-2018-17911 affects LAquis SCADA versions 4.1.0.3870 and earlier, involving multiple stack-based buffer overflow vulnerabilities that can lead to remote code execution. The connected advisories describe concrete vulnerable executables (e.g., aq.exe, vrel.exe, editorldriver.exe) and indicate ex...

CVE-2018-17911: Stack-based Buffer Overflow

LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution...

CVE-2018-17901: Out-of-bounds Write

LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process...

LAquis SCADA Code Execution Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. A code execution vulnerability in LAquis SCADA 4.1.0.3870 and prior versions, which arises from the program failing to filter user input before performing a write operation to a stack object, can be exploited by a remo...

CVE-2018-17899: Improper Limitation of a Pathname to a Restricted Directory

LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution...

LAquis SCADA Remote Code Execution Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. A remote code execution vulnerability exists in LAquis SCADA 4.1.0.3870 and earlier versions, which stems from the program back-referencing untrusted pointers and can be exploited by a remote attacker to execute code...

CVE-2018-17893: Untrusted Pointer Dereference

LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution...

CVE-2018-17895: Out-of-bounds Read

LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution...

LAquis SCADA Buffer Overflow Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. A stack buffer overflow vulnerability exists in LAquis SCADA 4.1.0.3870 and earlier versions that can be exploited by a remote attacker to execute code...

CVE-2018-17897: Integer Overflow or Wraparound

LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may allow remote code execution...

LAquis SCADA lqs File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

LAquis SCADA LQS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

LAquis SCADA LQS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsing of...

LAquis SCADA LQS File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsing of...

PT-2018-1716

Name of the Vulnerable Software and Affected Versions: LAquis SCADA versions 4.1.0.3870 and prior Description: The issue is related to an integer overflow to buffer overflow, which may allow a remote attacker to execute arbitrary code. Recommendations: For LAquis SCADA versions 4.1.0.3870 and...

PT-2018-1718

Name of the Vulnerable Software and Affected Versions: LAquis SCADA versions 4.1.0.3870 and prior Description: The issue is related to stack-based buffer overflow vulnerabilities in LAquis SCADA, which may allow remote code execution. This could enable an attacker to execute arbitrary code...

LAquis SCADA LQS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within parsing of...