ICS CERT LCDS Laquis Scada vulnerabilities
7 vulnerabilities
Known vulnerabilities in ICS CERT LCDS Laquis Scada, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-19004ics-certlcds laquis scada+1
EPSS score3.73%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration.CVE-2018-19000ics-certlcds laquis scada+1EPSS score8.79%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.CVE-2018-18988ics-certlcds laquis scada+1EPSS score2.57%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash.CVE-2018-18998ics-certlcds laquis scada+1EPSS score2.38%
LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.CVE-2018-18990ics-certlcds laquis scada+1EPSS score39.49%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.CVE-2018-18992ics-certlcds laquis scada+1EPSS score1.98%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper sanitation, which may allow an attacker to execute remote code on the server.CVE-2018-18996ics-certlcds laquis scada+1EPSS score2.46%
LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.