CVE-2018-18990

5.3 mediumEPSS 39%

Medium (5.3) in lcds laquis scada. EPSS 39% chance of exploitation in the next 30 days.

LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 39% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWEs: CWE-22, CWE-23
Published: 2019-02-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lcds:laquis_scada

References

http://www.securityfocus.com/bid/106634
https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01
http://www.securityfocus.com/bid/106634
https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01

Check your stack JSON