Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow an unauthenticated remote attacker to execute arbitrary commands on the server hosting WebCTRL or redirect legitimate users to malicious sites.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8526US | — | — | ||
A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously
crafted URL, which when visited by an authenticated WebCTRL user, could result in the r… | ||||
| CVE-2024-8525US | — | — | ||
An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST re… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-326-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-326-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationAutomated Logic SiteScan Web
Automated Logic has recommended the following:
- MitigationAutomated Logic SiteScan Web
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL Server
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL Server
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL for OEMs
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL for OEMs
Automated Logic has recommended the following:
- MitigationCarrier i-Vu
Automated Logic has recommended the following:
- MitigationCarrier i-Vu
Automated Logic has recommended the following:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan