Description (CNA)
Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocated buffer, which may allow an attacker to execute remote code in the context of the current process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME / LAquis SCADA | affected < 4.3.1.71 |
CWE
CWE-787
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-073-01
- https://www.zerodayinitiative.com/advisories/ZDI-19-307/
ADP enrichment
No English description supplied.