CVE-2018-18996 — ICS-CERT / LCDS Laquis SCADA

CVE-2018-18996

ICS-CERT / LCDS Laquis SCADA PUBLISHED

Description (CNA)

LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.

Affected (CNA)

Vendor / product	Versions
ICS-CERT / LCDS Laquis SCADA	affected All versions prior to version 4.1.0.4150

CWE

CWE-74

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01
http://www.securityfocus.com/bid/106634

ADP enrichment

CVE

No English description supplied.

https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01
http://www.securityfocus.com/bid/106634