VULNERABILITY INTELLIGENCE

CVE-2024-9414

EPSS probability0.65%
CISA KEVNot currently listed
Published2024-10-17
Last modified2026-06-17

Description

In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-79

Primary references