Vulnerability Description
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Lcds | Laquis Scada | < 4.1.0.4150 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106634Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/106634Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2018-18990?
CVE-2018-18990 is a vulnerability with a CVSS score of 5.3 (MEDIUM). LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information u...
How severe is CVE-2018-18990?
CVE-2018-18990 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-18990?
Check the references section above for vendor advisories and patch information. Affected products include: Lcds Laquis Scada.