CVE-2024-5040

Name of the Vulnerable Software and Affected Versions LAquis SCADA (affected versions not specified)

Description The issue is related to the LAquis SCADA system, where an attacker can access locations outside of their own directory. This is due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow an attacker to read, modify, or delete data, or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.