CVE-2018-17901
Last modified
CVE-2018-17901 is a vulnerability of currently unknown severity. LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.. EPSS estimates a 1.57% chance of exploitation in the next 30 days.
Description
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing write operations on a stack object, which may allow an attacker to execute code under the current process.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Lcds | Laquis Scada | <= 4.1.0.3870 |
References
- http://laquisscada.com/instale1.phpProduct, Vendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01Third Party Advisory, US Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/151421Third Party Advisory
- http://laquisscada.com/instale1.phpProduct, Vendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-18-289-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-17901?
How severe is CVE-2018-17901?
How do I fix CVE-2018-17901?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-17896Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500,…
- CVE-2018-17897LAquis SCADA Versions 4.1.0.3870 and prior has several integ…
- CVE-2018-17898Yokogawa STARDOM Controllers FCJ,FCN-100, FCN-RTU, FCN-500, …
- CVE-2018-17899LAquis SCADA Versions 4.1.0.3870 and prior has a path traver…
- CVE-2018-1790IBM Financial Transaction Manager for Digital Payments for M…4.3
- CVE-2018-17900Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500,…
- CVE-2018-17902Yokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500,…
- CVE-2018-17903SAGA1-L8B with any firmware versions prior to A0.10 are vuln…9.1
- CVE-2018-17904Reliance 4 SCADA/HMI, Version 4.7.3 Update 3 and prior. This…
- CVE-2018-17905When processing project files in Omron CX-Supervisor Version…
- CVE-2018-17906Philips iSite and IntelliSpace PACS, iSite PACS, all version…8.8
- CVE-2018-17907When processing project files in Omron CX-Supervisor Version…
Are you affected by CVE-2018-17901?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
