CVE-2018-17893

Name of the Vulnerable Software and Affected Versions: LAquis SCADA versions 4.1.0.3870 and prior

Description: The issue is related to an untrusted pointer dereference vulnerability in the LQS file parsing functionality of the LAquis SCADA tool, which is used for data collection and process control in industrial automation. This vulnerability may allow remote code execution.

Recommendations: For LAquis SCADA versions 4.1.0.3870 and prior, consider disabling the LQS file parsing functionality as a temporary workaround until a patch is available. Restrict access to the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.