Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow a remote attacker to deceive a legitimate user into running malicious scripts or redirecting them to malicious websites.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8528US | — | — | ||
Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized. | ||||
| CVE-2024-8527US | — | — | ||
Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-324-01 JSONself
- ICSA Advisory ICSA-25-324-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationAutomated Logic SiteScan Web
Automated Logic has reported the following:
- MitigationAutomated Logic SiteScan Web
Automated Logic has reported the following:
- MitigationAutomated Logic WebCTRL Server
Automated Logic has reported the following:
- MitigationAutomated Logic WebCTRL Server
Automated Logic has reported the following:
- MitigationAutomated Logic WebCTRL for OEMs
Automated Logic has reported the following:
- MitigationAutomated Logic WebCTRL for OEMs
Automated Logic has reported the following:
- MitigationCarrier i-Vu
Automated Logic has reported the following:
- MitigationCarrier i-Vu
Automated Logic has reported the following:
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan