LAquis.SCADA.LGX.Report.File.Parsing.Out.of.Bounds.Write

description-logoDescription

This indicates an attack attempt to exploit an Out of Bounds Write Vulnerability in LAquis SCADA.
An attacker can exploit this vulnerability by enticing a user to open a maliciously crafted LGX report file in the LAquis SCADA application. Successful exploitation could cause application to terminate abnormally or result in possible arbitrary code execution under the security context of the user.

affected-products-logoAffected Products

LAquis SCADA prior to 4.1.0.4150

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://laquisscada.com/

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-10-24 14.710 Default_action:pass:drop
2019-06-20 14.636

References

ICSA-19-015-01