CVE-2019-10994 - Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information

Back Back to CVE browser

LOW

Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information

Published Aug 5, 2019

3.3

LOW

CVSS 3.0

EPSS 0.86%

Description

Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information. The attacker must have local access to the system. A CVSS v3 base score of 2.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Affected products

Vendor n/a Product LCDS LAquis SCADA Default
unknown
Affected
- 4.3.1.71

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	LCDS LAquis SCADA	unknown	Affected 4.3.1.71

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2708
Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-213-06
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2708		Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-213-06		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Aug 5, 2019

Updated Aug 4, 2024

Reserved Apr 8, 2019

Link CVE-2019-10994

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-10994

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Aug 5, 2019

Updated Aug 4, 2024

Link EUVD-2019-2708

GitHub

No data