PT-2019-9696 · Lcds · Lcds Laquis Scada

Esteban Ruiz + 1 · Publicado 2019-01-19 · Atualizado 2019-10-09 · CVE-2018-19000

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions LCDS Laquis SCADA versions prior to 4.1.0.4150

Description The issue allows an authentication bypass, which may enable an attacker to access sensitive data.

Recommendations For versions prior to 4.1.0.4150, update to version 4.1.0.4150 or later to resolve the issue.

Correção

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Enumeração de Fraquezas

CWE-288

CWE-287

Identificadores relacionados

CVE-2018-19000

ZDI-19-068

Produtos afetados

Lcds Laquis Scada

Referências · 5

• http://securityfocus.com/bid/106634 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 · Nota
• https://osv.dev/vulnerability/CVE-2018-19000 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-19-068 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-19000 · Nota de Segurança