CVE-2024-5040

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

There are multiple ways in LCDS LAquis SCADA for an attacker to access locations outside of their own directory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
LCDSLAquis SCADA<= 4.7.1.7
lcdslaquis_scada*

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-504007.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504017.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504027.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504037.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504048.8A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who hCVE-2024-504055.5An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versCVE-2024-504065.4A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote atCVE-2024-504076.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows ReCVE-2024-504088.8Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: froCVE-2024-504095.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows StCVE-2024-50415.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ha-ia-content-button’ parameter inCVE-2024-504105.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows St
CVE-2024-5040: High severity, CVSS 7.8 | Vulnix