description: LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server.
problem types: IMPROPER NEUTRALIZATION OF SPECIAL ELEMENTS IN OUTPUT USED BY A DOWNSTREAM COMPONENT ('INJECTION') CWE-74
affected:
{
product: LCDS Laquis SCADA
vendor: ICS-CERT
versions:
status: affected, version: All versions prior to version 4.1.0.4150
}