PT-2019-9686
CVE-2018-18986
·
تاريخ النشر
2019-01-19
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 2.0
8.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:C
Name of the Vulnerable Software and Affected Versions
LCDS Laquis SCADA versions prior to 4.1.0.4150
Description
The issue allows the opening of a specially crafted report format file, which may cause an out of bounds read. This can lead to a system crash, allow data exfiltration, or enable remote code execution.
Recommendations
For versions prior to 4.1.0.4150, update to version 4.1.0.4150 or later to resolve the issue. As a temporary workaround, consider restricting the opening of report format files from untrusted sources until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾