102 matches found
CVE-2018-18988
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash...
CVE-2018-18988
LAquis SCADA LGX report handling is vulnerable (CVE-2018-18988). In LAquis LCDS/LGX processing, a specially crafted LGX report file can trigger code execution or other impacts. Connected advisories detail multiple correlated flaws: LGX/Report processing can be abused to execute scripts or spawn a...
CVE-2018-18988
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash...
Unspecified vulnerability in LCDS LAquis SCADA (CNVD-2019-28111)
LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3870, whi...
LCDS LAquis SCADA Path Traversal Vulnerability
LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A path traversal vulnerability in LCDS LAquis SCADA version 4.1.0.3870, whic...
LCDS LAquis SCADA Code Injection Vulnerability
LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A code injection vulnerability exists in LCDS LAquis SCADA version 4.1.0.387...
CVE-2017-6020
Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...
Design/Logic Flaw
Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...
CVE-2017-6020
Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...
CVE-2017-6020
CVE-2017-6020 affects LAquis SCADA: older software versions (prior to 4.1.0.3237) fail to neutralize external input, enabling a path-traversal that could disclose files. The vulnerability is documented as a remote, unauthenticated information disclosure (ZDI/ZDI-derived advisories, Exploit-DB/Pac...
LCDS LAquis SCADA Arbitrary Code Execution Vulnerability
LCDS LAquis SCADA A suite of SCADA software for monitoring and data acquisition from LCDS Brazil. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3391 and prior versions, which arises from the program's failure to properly detect or handle abnormal conditions. An attacker could...
CVE-2018-5463
A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA 4.1.0.3391 and earlier may allow code execution...
CVE-2018-5463
The LCDS LAquis SCADA product (Laquis SCADA) from Leão Consultoria e Desenvolvimento de Sistemas LTDA ME is affected by CVE-2018-5463. Affected: LAquis SCADA software versions 4.1.0.3391 and earlier. Root cause: improper handling/check of exceptional conditions, triggering a structured exception ...
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
1. EXECUTIVE SUMMARY CVSS v3 7.0 Vendor : LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME Equipment : LAquis SCADA Vulnerability : Improper Check or Handling of Exceptional Conditions 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the device an attacker...
Improper access control
An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which...
CVE-2017-6016
An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which...
CVE-2017-6016
An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which...
CVE-2017-6016
The CVE-2017-6016 issue affects LCDS – Leão Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA (LAquis SCADA), specifically versions 4.1 and earlier released before 20 Jan 2017. Root cause: Improper Access Control (CWE-284) that may allow an authenticated user to modify application fi...
CVE-2017-6016
An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which...
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerability: Path Traversal AFFECTED PRODUCTS The following versions of LAquis SCADA, an industrial automation software, are...