CVE-2018-18996

2019-01-1500:00:00

CWE-74

icscert

www.cve.org

9.7 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON

LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.

CNA Affected

[
  {
    "product": "LCDS Laquis SCADA",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 4.1.0.4150"
      }
    ]
  }
]