Back to Database
Status published
High
CVE-2018-17901
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files...
Vulnerability Description
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17901
Credits & Attribution
No credits recorded in the NVD database.
References
More from LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME
View All →CVE-2018-17911
LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer...
High
7.8
CVE-2018-17899
LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal...
High
8.8
CVE-2018-17895
LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read...
Critical
9.8
CVE-2018-17893
LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer...
Critical
9.8
Affected Vendor
LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME
View all reports →Affected Software
LAquis SCADA
Vulnerable Versions:
4.1.0.3870 and prior
Timeline
Official Publish:
October 17th, 2018
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H