CVE-2018-18992 LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server.
HighCVSS 8.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lcds laquis scada | < 4.1.0.4150 | 4.1.0.4150 |
| ICS-CERT LCDS Laquis SCADA | = All versions prior to version 4.1.0.4150 | No fix listed |
References
- 106634 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource