description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.
problem types: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS IN OUTPUT USED BY A DOWNSTREAM COMPONENT ('INJECTION') CWE-74
affected:
{
product: LCDS Laquis SCADA
vendor: ICS-CERT
versions:
status: affected, version: All versions prior to version 4.1.0.4150
}