Processing a specially crafted project file may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information.
A type confusion vulnerability may be exploited when LAquis SCADA processes a specially crafted project file. This may allow an attacker to execute remote code.
LCDS—Leão Consultoria e Desenvolvimento de Sistemas LTDA ME
LAquis SCADA 126.96.36.199
LCDS recommends users update to Version 188.8.131.523.