CVE-2021-32989 — LCDS LAquis SCADA - Cross-site Scripting

CVE-2021-32989

LCDS LAquis SCADA - Cross-site Scripting PUBLISHED

Description (CNA)

When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.

Affected (CNA)

Vendor / product	Versions
LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME / LAquis SCADA	affected All through 4.3.1.1011

CWE

CWE-79

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-04

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-208-04

CISA-ADP

No English description supplied.

No references supplied.