CVE-2018-19002 LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or....
HighCVSS 7.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lcds laquis scada | < 4.1.0.4150 | 4.1.0.4150 |
| LCDS Laquis SCADA | = All versions prior to version 4.1.0.4150 | No fix listed |
References
- 106634 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource