CVE-2018-17893: lcds - leão consultoria e desenvolvimento de sistemas ltda me laquis scada Untrusted Pointer Dereference

EPSS trend

Probability

6.38%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

+0.82 pp

From 5.56% on 21-09-2026

21-09-202621-10-2026

EPSS score

6.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

4 links

laquisscada.com/instale1.phpX Refsource MISCProductVendor Advisory
www.securityfocus.com/bid/105719VDB EntryX Refsource BIDThird Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-289-01X Refsource MISCThird Party AdvisoryUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/151417Third Party Advisory

Related vulnerabilities

CVE-2018-19002lcdslaquis_scada+12.67%7y ago05-02-2019 18:00LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash.CVE-2018-19029lcdslaquis_scada+12.67%7y ago05-02-2019 18:00LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.CVE-2018-19004ics-certlcds laquis scada+13.73%7y ago01-02-2019 18:00LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration.CVE-2018-19000ics-certlcds laquis scada+18.79%7y ago05-02-2019 18:00LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.CVE-2018-17901lcds - leão consultoria e desenvolvimento de sistemas ltda melaquis scada+11.57%8y ago17-10-2018 02:00LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.CVE-2018-17911lcds - leão consultoria e desenvolvimento de sistemas ltda melaquis scada+13.16%8y ago17-10-2018 02:00LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution.

All vulnerabilities inlaquis scada laquis_scada

CVE-2018-17893: lcds - leão consultoria e desenvolvimento de sistemas ltda me laquis scada Untrusted Pointer Dereference

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References