The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.

The vulnerability of the data collection and industrial automation control tool LAquis SCADA is related to insufficient verification of the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...