CVE-2018-18996

—

CVSS 3.0

9.8 critical

EPSS

2%p83

Published

Feb 5, 2019 (Feb 5, 2019)

Modified

Jun 17, 2026

Description

LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.

Vendors: lcds
Products: laquis scada
Weakness: CWE-74, CWE-862
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.