CVE-2018-18990

N/A

Descripcion

LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado2/5/2019

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

lcds:laquis_scada

Debilidades (CWE)

CWE-23CWE-22

Referencias

http://www.securityfocus.com/bid/106634(ics-cert@hq.dhs.gov)

https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01(ics-cert@hq.dhs.gov)

http://www.securityfocus.com/bid/106634(af854a3a-2127-422b-91ae-364da2661108)

https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.