CVE-2018-18996: Lcds Laquis Scada

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

LCDS Laquis SCADA prior to version 4.1.0.4150 allows taking in user input without proper authorization or sanitation, which may allow an attacker to execute remote code on the server.

Affected products

• Lcds Laquis Scada: before 4.1.0.4150 (fixed in 4.1.0.4150)

Published 2019-02-05. Last modified 2026-06-17.