PT-2019-9696 · Lcds · Lcds Laquis Scada

Esteban Ruiz + 1 · Published 2019-01-19 · Updated 2019-10-09 · CVE-2018-19000

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions LCDS Laquis SCADA versions prior to 4.1.0.4150

Description The issue allows an authentication bypass, which may enable an attacker to access sensitive data.

Recommendations For versions prior to 4.1.0.4150, update to version 4.1.0.4150 or later to resolve the issue.

Fix

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

CVE-2018-19000

ZDI-19-068

Affected Products

Lcds Laquis Scada

References · 5

• https://osv.dev/vulnerability/CVE-2018-19000 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-19-068 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-19000 · Security Note
• http://securityfocus.com/bid/106634 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-015-01 · Note