GCVE - cpe:2.3:a:lcds_-_leão_consultoria_e_desenvolvimento_de_sistemas_ltda_me:laquis

Approved changes feed: RSS · Atom

cpe:2.3:a:lcds_-_leão_consultoria_e_desenvolvimento_de_sistemas_ltda_me:laquis_scada:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Lcds Leão Consultoria E Desenvolvimento De Sistemas Ltda Me (`5bf91c93-06e1-5f90-b4f2-3a6fdace367b`)
Product	Laquis Scada (`b5f62183-92bb-5ad2-9094-c6068fe495ff`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-9414`	vulnerable	2026-06-08 07:00:27.298515	Cross-site Scripting vulnerability in LCDS LAquis SCADA In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions. Published: 2024-10-17T15:59:24.981Z Updated: 2024-10-17T17:52:13.378Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-291-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6536`	vulnerable	2026-06-08 05:14:11.870320	Details available Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocated buffer, which may allow an attacker to execute remote code in the context of the current process. Published: 2019-03-27T15:25:23.000Z Updated: 2024-08-04T20:23:21.362Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-19-073-01 https://www.zerodayinitiative.com/advisories/ZDI-19-307/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17911`	vulnerable	2026-06-08 05:11:06.880616	Details available LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution. Published: 2018-10-17T02:00:00.000Z Updated: 2024-09-16T18:34:43.642Z Open on db.gcve.eu Reference links http://laquisscada.com/instale1.php https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17901`	vulnerable	2026-06-08 05:11:06.863785	Details available LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process. Published: 2018-10-17T02:00:00.000Z Updated: 2024-09-16T21:57:33.671Z Open on db.gcve.eu Reference links http://laquisscada.com/instale1.php https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17899`	vulnerable	2026-06-08 05:11:06.862814	Details available LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution. Published: 2018-10-17T02:00:00.000Z Updated: 2024-09-17T00:45:27.781Z Open on db.gcve.eu Reference links http://laquisscada.com/instale1.php http://www.securityfocus.com/bid/105719 https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17895`	vulnerable	2026-06-08 05:11:06.854235	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17893`	vulnerable	2026-06-08 05:11:06.852563	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Laquis Scada

Notes

PURL mappings

Vulnerability references

Contribute