CVE-2018-17895CWE-125

LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution

published October 17, 2018

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

⚠️ A few crafty out-of-bounds reads in LAquis SCADA could lead to some unexpected remote code execution! This is your chance to tighten security and keep control! Think of it like an HVAC system that allows a technician to access parts of the facility beyond their authorization—once they slip through the cracks, it's chaos! This vulnerability lets attackers potentially execute code from afar, much like a rogue staff member tampering with sensitive controls. If exploited, this could allow an attacker to run arbitrary code on your system, potentially leading to unauthorized access or disruption of critical operations. The stakes are high, as an intruder could gain control of essential functions, leaving your SCADA environment vulnerable to manipulation.

Put simply

Think of it like an HVAC system that allows a technician to access parts of the facility beyond their authorization—once they slip through the cracks, it's chaos! This vulnerability lets attackers potentially execute code from afar, much like a rogue staff member tampering with sensitive controls. The LAquis SCADA software versions 4.1.0.3870 and earlier contain multiple out-of-bounds read vulnerabilities that may allow for remote code execution due to improper bounds checking in the code.

What to do

If exploited, this could allow an attacker to run arbitrary code on your system, potentially leading to unauthorized access or disruption of critical operations. The stakes are high, as an intruder could gain control of essential functions, leaving your SCADA environment vulnerable to manipulation. To mitigate this vulnerability, update to the latest version of LAquis SCADA immediately. Conduct a thorough audit of your security settings and implement strict access controls to minimize exposure risks. You've got this! Tackle this vulnerability head-on and help secure your systems. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04831 · 91.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2018-10-17T02:00Z
EPSS history
Timeline
  • 17 OCT 02:00Z
    LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution
    cvelistv5