CVE-2018-17901CWE-787

LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on…

published October 17, 2018

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01567 · 75.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2018-10-17T02:00Z
EPSS history
Timeline
  • 17 OCT 02:00Z
    LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on…
    cvelistv5