CVE-2018-19002CWE-94

LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow…

published February 5, 2019

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow remote code execution, data exfiltration, or cause a system crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02668 · 85.5th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2019-02-05T18:00Z
EPSS history
Timeline
  • 05 FEB 18:00Z
    LCDS Laquis SCADA prior to version 4.1.0.4150 allows improper control of generation of code when opening a specially crafted project file, which may allow…
    cvelistv5