Описание
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.
Ссылки
- ProductVendor Advisory
- Third Party AdvisoryUS Government Resource
- Third Party Advisory
- ProductVendor Advisory
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
EPSS
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.
Уязвимость инструмента для сбора данных и контроля процессов промышленной автоматизации LAquis SCADA, связанная с записью данных за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код
EPSS
7.8 High
CVSS3
6.8 Medium
CVSS2