CVE-2018-19000
Description
LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
LAquis SCADA prior to 4.1.0.4150 contains an authentication bypass that allows unauthenticated network attackers to access sensitive data.
Vulnerability
LAquis SCADA versions prior to 4.1.0.4150 (including version 4.1.0.3870 as identified in the advisory) are affected by an authentication bypass vulnerability (CWE-288). An attacker with network access to the affected product can log in without any authentication, bypassing the normal login mechanism [1].
Exploitation
The vulnerability is exploitable remotely with low complexity. The attacker requires only network access to the LAquis SCADA service; no authentication or user interaction is needed. By sending crafted network requests, an attacker can bypass the authentication process and gain unauthorized access to the system [1].
Impact
Successful exploitation allows the attacker to access sensitive data (confidentiality impact: high) and potentially modify data (integrity impact: high). The vulnerability does not affect availability. The CVSS v3 base score is 7.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) [1].
Mitigation
LCDS has addressed this vulnerability in LAquis SCADA version 4.1.0.4150. Users should upgrade to this version or later. No workarounds or alternative mitigations have been published in the available references [1].
AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Range: <4.1.0.4150
- ICS-CERT/LCDS Laquis SCADAv5Range: All versions prior to version 4.1.0.4150
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/106634mitrevdb-entryx_refsource_BID
- ics-cert.us-cert.gov/advisories/ICSA-19-015-01mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.