PT-2019-12120 · Laquis · Laquis Scada

Publicado 2019-08-05 · Atualizado 2020-10-02 · CVE-2019-10980

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LAquis SCADA version 4.3.1.71

Description A type confusion issue may be exploited when processing a specially crafted project file, potentially allowing an attacker to execute remote code. The attacker must have local access to the system.

Recommendations For LAquis SCADA version 4.3.1.71, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Type Confusion

Enumeração de Fraquezas

CWE-843

Identificadores relacionados

CVE-2019-10980

ZDI-19-689

Produtos afetados

Laquis Scada

Referências · 4

• https://zerodayinitiative.com/advisories/ZDI-19-689 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-10980 · Nota de Segurança
• https://us-cert.gov/ics/advisories/icsa-19-213-06 · Nota
• https://osv.dev/vulnerability/CVE-2019-10980 · Aviso do Fabricante