CVE-2018-18988CWE-125

LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file

published February 1, 2019

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file. This may allow remote code execution, data exfiltration, or cause a system crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02572 · 85.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2019-02-01T17:00Z
EPSS history
Timeline
  • 01 FEB 17:00Z
    LCDS Laquis SCADA prior to version 4.1.0.4150 allows execution of script code by opening a specially crafted report format file
    cvelistv5