PT-2019-12120 · Laquis · Laquis Scada

Published 2019-08-05 · Updated 2020-10-02 · CVE-2019-10980

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LAquis SCADA version 4.3.1.71

Description A type confusion issue may be exploited when processing a specially crafted project file, potentially allowing an attacker to execute remote code. The attacker must have local access to the system.

Recommendations For LAquis SCADA version 4.3.1.71, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2019-10980

ZDI-19-689

Affected Products

Laquis Scada

References · 4

• https://zerodayinitiative.com/advisories/ZDI-19-689 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-10980 · Security Note
• https://osv.dev/vulnerability/CVE-2019-10980 · Vendor Advisory
• https://us-cert.gov/ics/advisories/icsa-19-213-06 · Note