CVE-2018-8869 In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/...
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lantech ids 2102 firmware | All versions | No fix listed |
| lantech IDS 2102 | = 2.0 and prior | No fix listed |
References
- 104098 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource