Skip to main content

Laquis Scada CVE-2018-17893

CRITICAL
Untrusted Pointer Dereference (CWE-822)
2018-10-17 ics-cert@hq.dhs.gov
RCE Laquis Scada
9.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Oct 17, 2018 - 02:29 nvd
CRITICAL 9.8

DescriptionNVD

LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.

AnalysisAI

LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-822. LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution. Affected products include: Lcds Laquis Scada.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Laquis Scada

View all
CVE-2018-17897 CRITICAL
9.8 Oct 17

LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may al
CVE-2018-17895 CRITICAL
9.8 Oct 17

LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code e
CVE-2018-17899 HIGH
8.8 Oct 17

LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution. Ra
CVE-2020-10622 HIGH
7.8 May 04

LCDS LAquis SCADA Versions 4.3.1 and prior. Rated high severity (CVSS 7.8), this vulnerability is no authentication requ
CVE-2019-6536 HIGH
7.8 Mar 27

Opening a specially crafted LCDS LAquis SCADA before 4.3.1.71 ELS file may result in a write past the end of an allocate
CVE-2018-17911 HIGH
7.8 Oct 17

LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remo
CVE-2018-17901 HIGH
7.8 Oct 17

LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input p
CVE-2018-5463 HIGH
7.8 Apr 09

A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME L
CVE-2020-10618 MEDIUM
5.5 May 04

LCDS LAquis SCADA Versions 4.3.1 and prior. Rated medium severity (CVSS 5.5), this vulnerability is no authentication re

Same weakness CWE-822 – Untrusted Pointer Dereference

View all
CVE-2024-35250 HIGH POC
7.8
CVE-2023-21768 HIGH POC
7.8
CVE-2024-21338 HIGH POC
7.8
CVE-2025-50165 CRITICAL
9.8
CVE-2026-33120 HIGH
8.8
CVE-2023-1437 CRITICAL
9.8
CVE-2018-14811 CRITICAL
9.8
CVE-2018-7497 CRITICAL
9.8

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2018-17893 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy