CVE-2018-18990CWE-23

LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation

published February 5, 2019

CVSS
—
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.39487 · 98.6th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2019-02-05T18:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 39% → 3%
    epss
  • 06 SEP 03:11Z
    EPSS moved 39% → 3%
    epss
  • 30 AUG 16:01Z
    EPSS moved 3% → 39%
    epss
  • 29 AUG 04:36Z
    EPSS moved 39% → 3%
    epss
  • 05 FEB 18:00Z
    LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation
    cvelistv5