CVE-2019-10980

LAquis SCADA 4.3.1.71 is affected by a type confusion in LQS file parsing that may allow remote code execution when processing a specially crafted project file. The vulnerability is scoped to LAquis SCADA and is associated with CVE-2019-10980 (CVSSv3 base score 7.8). Some sources indicate the att...

CVE-2019-10994

CVE-2019-10994 affects LAquis SCADA 4.3.1.71, where the LQS file parser can trigger an out-of-bounds read that may disclose sensitive information. Public sources disagree on exploitability: some indicate local access is required (initial descriptions), while others describe remote disclosure poss...

CVE-2021-41579

LCDS LAquis SCADA

CVE-2020-25188

The CVE-2020-25188 vulnerability affects LAquis SCADA prior to 4.3.1.870. It is described as an out-of-bounds read in LQS file parsing that could allow an attacker to execute code with the application’s privileges. Exploitation requires a valid user to open a crafted project file; some sources no...