LCDS LAquis SCADA
view advisory published 2024-05-21
Successful exploitation of these vulnerabilities could allow an attacker to read and write files outside of their own directory.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-5040US | — | — | ||
There are multiple ways in
LCDS LAquis SCADA for an attacker to access locations outside of their own directory. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-142-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-142-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedLAquis SCADA
LCDS recommends users update to version 4.7.1.371 or newer of LAquis SCADA which has been configured to resolve the reported path traversal issues.
https://laquisscada.com/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan