LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
Successful exploitation of these vulnerabilities could allow remote code execution, data exfiltration, or cause a system crash.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-18994US | high7.1 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project file, which may cause a system crash or allow data exfiltration. | ||||
| CVE-2018-19029US | high7.8 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote… | ||||
| CVE-2018-19002US | high7.8 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, da… | ||||
| CVE-2018-19000US | medium5.3OT elevated | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data. | ||||
| CVE-2018-18998US | critical9.8OT elevated | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges. | ||||
| CVE-2018-18996US | critical9.8OT elevated | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the serv… | ||||
| CVE-2018-18992US | high8.8 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server. | ||||
| CVE-2018-18990US | medium5.3 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sen… | ||||
| CVE-2018-18986US | high7.8 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds read, which may cause a system crash, all… | ||||
| CVE-2018-19004US | low3.3 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration. | ||||
| CVE-2018-18988US | high8.8 | — | ||
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltra… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-19-015-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (11)
- MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/ - MitigationSCADA
LCDS recommends users update to Version 4.1.0.4150
https://laquisscada.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan