CRITICAL🇵🇱 Wersja polska

CVE-2018-18996

CVSS 9.8v3.0pub. 2019-02-05upd. 2024-11-21

LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Lcds Laquis Scada

    APP
    Lcds
    < 4.1.0.4150
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-32989CRITICAL9.3PL ✓same product

Reflected XSS w LCDS LAquis SCADA poprzez komunikaty błędów

CVE-2018-18998CRITICAL9.8PL ✓same product

Zakodowane na stałe dane uwierzytelniające w LCDS Laquis SCADA

CVE-2018-17895CRITICAL9.8PL ✓same product

Wielokrotny out-of-bounds read umożliwiający RCE w LAquis SCADA

CVE-2018-17893CRITICAL9.8PL ✓same product

RCE przez dereferencję niezaufanego wskaźnika w LAquis SCADA

CVE-2018-17897CRITICAL9.8PL ✓same product

Integer overflow do buffer overflow w LAquis SCADA — możliwe RCE