CVE-2018-14918

LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.

Basic Information

CVE State: PUBLISHED
Reserved Date: August 03, 2018
Published Date: June 28, 2019
Last Updated: August 05, 2024
Vendor: n/a
Product: n/a
Description: LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.
Tags

CVSS Scores

CVSS v3.0

7.5 - HIGH

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

7.8

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploit Status

Exploited in the Wild: Yes (2026-02-11 00:00:00 UTC) Source

References

http://seclists.org/fulldisclosure/2019/Apr/12 http://packetstormsecurity.com/files/152453/Loytec-LGATE-902-XSS-Traversal-File-Deletion.html https://seclists.org/fulldisclosure/2019/Apr/12

Known Exploited Vulnerability Information

Source	Added Date
The Shadowserver (via CIRCL)	2026-02-11 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Nuclei	https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14918.yaml	2025-04-25 00:00:00 UTC

Timeline

CVE ID Reserved

August 03, 2018
CVE Published to Public

June 28, 2019
Detected by Nuclei

April 25, 2025
Added to KEVIntel

February 11, 2026