Path Traversal Vulnerability in LCDS Laquis SCADA Software by Laquis
CVE-2018-18990

5.3MEDIUM

Key Information:

Vendor

Ics-cert

Status
Lcds Laquis Scada
Vendor
CVE Published:
5 February 2019

What is CVE-2018-18990?

Prior to version 4.1.0.4150, LCDS Laquis SCADA is susceptible to path traversal attacks due to improper validation of user-supplied paths in file operations. This vulnerability may be exploited by attackers to gain unauthorized access to sensitive information on the web server, potentially compromising system security. Proper validation of input paths is essential to mitigate this risk.

Affected Version(s)

LCDS Laquis SCADA All versions prior to version 4.1.0.4150

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01
x_refsource_MISC
http://www.securityfocus.com/bid/106634
vdb-entryx_refsource_BID

EPSS Score

39% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.