CVE-2018-19004

Опубликовано: 01 фев. 2019

Источник: nvd

CVSS3: 3.3

CVSS2: 4.3

EPSS Низкий

Описание

LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of bounds read when opening a specially crafted project file, which may allow data exfiltration.

Ссылки

http://www.securityfocus.com/bid/106634
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/106634
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lcds:laquis_scada:*:*:*:*:*:*:*:*

Версия до 4.1.0.4150 (исключая)

EPSS

Процентиль: 34%

0.00139

Низкий

3.3 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

GHSA-4f8f-mxjm-p699