LCDS LAquis SCADA

An attacker with local access to a LAquis SCADA system could read and write files outside the intended application directory, potentially modifying control system configurations or extracting sensitive data. This could disrupt SCADA operations or expose credentials and setpoints used to manage energy systems.

Energy sector operators running LAquis SCADA systems, particularly utilities managing power generation or distribution. Equipment affected includes SCADA control servers and operator workstations running vulnerable versions of the software that can be used to monitor and control critical infrastructure.

An attacker must first gain local access to the LAquis SCADA host machine (physical console or lateral movement from a compromised workstation on the same network). Once local, the attacker can exploit a path traversal vulnerability in the application to access files outside the restricted directory—for example, reading configuration files with credentials or writing to system files to alter process setpoints or disable monitoring.