CVE-2020-10622

LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorized users

• CWE-20

• https://www.us-cert.gov/ics/advisories/icsa-20-119-01Mitigation, Third Party Advisory, US Government Resource
• https://www.us-cert.gov/ics/advisories/icsa-20-119-01Mitigation, Third Party Advisory, US Government Resource

Published

May 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10617There are multiple ways an unauthenticated attacker could pe…7.5
• CVE-2020-10618LCDS LAquis SCADA Versions 4.3.1 and prior. The affected pro…5.5
• CVE-2020-10619An attacker could use a specially crafted URL to delete file…9.1
• CVE-2020-1062A remote code execution vulnerability exists when Internet E…7.5
• CVE-2020-10620Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC commu…9.8
• CVE-2020-10621Multiple issues exist that allow files to be uploaded and ex…9.8
• CVE-2020-10623Multiple vulnerabilities could allow an attacker with low pr…6.5
• CVE-2020-10624ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101…7.5
• CVE-2020-10625WebAccess/NMS (versions prior to 3.0.2) allows an unauthenti…9.8
• CVE-2020-10626In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontr…7.8
• CVE-2020-10627Insulet Omnipod Insulin Management System insulin pump produ…8.1
• CVE-2020-10628ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101…7.5