Path Traversal Vulnerability in LCDS Laquis SCADA

CVE-2018-18990 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process.

Learn more about our Web App Pen Testing.