Skip to content
Noroxi

LCDS records

23 published records for vendor lcds.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 22
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

23 records
  • CVE-2018-17893
    41Plan

    LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.

    CriticalCVSS 9.8No exploitEPSS 6%

    lcds · laquis scadaOct 16, 2018

  • CVE-2018-17897
    41Plan

    LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may allow remote code exec

    CriticalCVSS 9.8No exploitEPSS 5%

    lcds · laquis scadaOct 16, 2018

  • CVE-2018-17895
    40Plan

    LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution.

    CriticalCVSS 9.8No exploitEPSS 4%

    lcds · laquis scadaOct 16, 2018

  • CVE-2018-18996
    40Plan

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an att

    CriticalCVSS 9.8No exploitEPSS 2%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2018-18998
    40Plan

    LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system wit

    CriticalCVSS 9.8No exploitEPSS 2%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2018-17899
    37Monitor

    LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution.

    HighCVSS 8.8No exploitEPSS 8%

    lcds · laquis scadaOct 16, 2018

  • CVE-2018-18988
    36Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file.

    HighCVSS 8.8No exploitEPSS 2%

    lcds · laquis scadaFeb 1, 2019

  • CVE-2018-18992
    36Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute

    HighCVSS 8.8No exploitEPSS 1%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2024-5040
    34Monitor

    LCDS LAquis SCADA Path Traversal

    HighCVSS 8.5No exploitEPSS 0%

    lcds · laquis scadaMay 21, 2024

  • CVE-2018-18990
    33Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation.

    MediumCVSS 5.3No exploitEPSS 39%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2018-17911
    32Monitor

    LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution.

    HighCVSS 7.8No exploitEPSS 3%

    lcds · laquis scadaOct 16, 2018

  • CVE-2018-19029
    32Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled

    HighCVSS 7.8No exploitEPSS 2%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2018-18986
    32Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows the opening of a specially crafted report format file that may cause an out of bounds r

    HighCVSS 7.8No exploitEPSS 2%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2018-19002
    32Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, w

    HighCVSS 7.8No exploitEPSS 2%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2018-17901
    31Monitor

    LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing w

    HighCVSS 7.8No exploitEPSS 1%

    lcds · laquis scadaOct 16, 2018

  • CVE-2019-6536
    31Monitor

    Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocated buffer, which may

    HighCVSS 7.8No exploitEPSS 1%

    lcds · laquis scadaMar 27, 2019

  • CVE-2020-10622
    31Monitor

    LCDS LAquis SCADA Versions 4.3.1 and prior.

    HighCVSS 7.8No exploitEPSS 0%

    lcds · laquis scadaMay 4, 2020

  • CVE-2018-5463
    31Monitor

    A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA 4.1.0.33

    HighCVSS 7.8No exploitEPSS 0%

    lcds · laquis scadaApr 9, 2018

  • CVE-2021-32989
    25Monitor

    LCDS LAquis SCADA - Cross-site Scripting

    MediumCVSS 6.1No exploitEPSS 2%

    lcds · laquis scadaMay 25, 2022

  • CVE-2018-19000
    24Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.

    MediumCVSS 5.3No exploitEPSS 8%

    lcds · laquis scadaFeb 5, 2019

  • CVE-2017-6020
    24Monitor

    Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize e

    MediumCVSS 5.3Proof of conceptEPSS 8%

    lcds · laquis scadaApr 17, 2018

  • CVE-2020-10618
    22Monitor

    LCDS LAquis SCADA Versions 4.3.1 and prior.

    MediumCVSS 5.5No exploitEPSS 0%

    lcds · laquis scadaMay 4, 2020

  • CVE-2018-19004
    14Monitor

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data

    LowCVSS 3.3No exploitEPSS 3%

    lcds · laquis scadaFeb 1, 2019