PT-2023-9498 · Unknown · Laquis Scada

Name of the Vulnerable Software and Affected Versions: LAquis SCADA affected versions not specified Description: The issue is related to the LAquis SCADA system, where an attacker can access locations outside of their own directory. This is due to incorrect restriction of the path name to a...

Unspecified Vulnerability in LCDS LAquis SCADA

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3870, whi...

LCDS LAquis SCADA Authentication Bypass Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An authentication bypass vulnerability exists in LCDS LAquis SCADA version...

LAquis SCADA Input Validation Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. An input validation vulnerability exists in LAquis SCADA version 4.1.0.3870, which can be exploited by an attacker to execute code with the help of a specially crafted report formatted file, disclose data or cause a...

The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.

The vulnerability of the LQS syntax analyzer in data collection files and in the LAquis SCADA system for process automation control is related to buffer overflow in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

LAquis SCADA Integer Overflow Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. An integer overflow vulnerability exists in LAquis SCADA version 4.1.0.3870 and earlier versions that can be exploited by remote attackers to execute code...