Vulnerabilities

LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal.

An attacker who convinces a valid user to open a specially crafted project file to exploit could execute code under the privileges of the application due to an out-of-bounds read vulnerability on the LAquis SCADA (Versio…

Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information.

A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file.

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project file, which may cause a system crash or allow data exfiltration.