Heap overflow

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a heap-based buffer overflow vulnerability has been identified, which may...

CVE-2018-8845

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a heap-based buffer overflow vulnerability has been identified, which may...

CVE-2018-10591

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

CVE-2018-10591

In Advantech WebAccess versions V8.220170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, an origin validation error vulnerability has been identified, which may...

Advantech WebAccess SCADA gmicons.asp picfile Arbitrary File Upload (CVE-2017-16736)

An arbitrary file upload vulnerability exists in Advantech WebAccess SCADA software. The vulnerability is due to insufficient input validation of the picfile parameter within gmicons.asp...

Schneider Electric InduSoft Web Studio RCE (Apr 2018)

An installed version of Schneider Electric InduSoft Web Studio is vulnerable to RCE and therefore requires a security update. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109144; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2017-6020

Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...

CVE-2017-6020

Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...

Design/Logic Flaw

Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...

CVE-2017-6020

Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...

CVE-2017-6020

CVE-2017-6020 affects LAquis SCADA: older software versions (prior to 4.1.0.3237) fail to neutralize external input, enabling a path-traversal that could disclose files. The vulnerability is documented as a remote, unauthenticated information disclosure (ZDI/ZDI-derived advisories, Exploit-DB/Pac...

LCDS LAquis SCADA Arbitrary Code Execution Vulnerability

LCDS LAquis SCADA A suite of SCADA software for monitoring and data acquisition from LCDS Brazil. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3391 and prior versions, which arises from the program's failure to properly detect or handle abnormal conditions. An attacker could...

CVE-2018-5463

A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution...

CVE-2018-5463

A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution...

Buffer overflow

A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution...

CVE-2018-5463

The LCDS LAquis SCADA product (Laquis SCADA) from Leão Consultoria e Desenvolvimento de Sistemas LTDA ME is affected by CVE-2018-5463. Affected: LAquis SCADA software versions 4.1.0.3391 and earlier. Root cause: improper handling/check of exceptional conditions, triggering a structured exception ...

CVE-2018-5463

A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution...

LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor : LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME Equipment : LAquis SCADA Vulnerability : Improper Check or Handling of Exceptional Conditions 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the device an attacker...

Insecure SCADA Systems Blamed in Rash of Pipeline Data Network Attacks

After a cyberattack shut down numerous pipeline communication networks this week, experts are stressing the importance of securing third-party systems in supervisory control and data acquisition SCADA environments. Over the past two days, various major U.S. pipelines across the country reported...

Rockwell LOGIX 5324 ER Cross Site Scripting

Vulnerable Products: Rockwell SCADA/ICS System Affected Versions: Rockwell LOGIX 5324 ER Vulnerability Typus: Cross Site Scripting & HTML Adegnjection Description: SCADA systems are crucial for industrial organizations since they help to maintain efficiency, process data for smarter decisions, an...