CVE-2018-19004

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration.

Score

CVSS 3.0 3.3 Low

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-02-01

Last modified

2024-09-16

Weaknesses

CWE-125

Affected products

• Lcds Laquis Scada (Ics-cert)
• Laquis Scada (Lcds)

References

• http://www.securityfocus.com/bid/106634
• https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01