Automated Logic WebCTRL Premium Server
Successful exploitation of these vulnerabilities could allow an unauthenticated remote attacker to execute arbitrary commands on the server hosting WebCTRL or redirect legitimate users to malicious sites.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-8526US | — | — | ||
A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously
crafted URL, which when visited by an authenticated WebCTRL user, could result in the r… | ||||
| CVE-2024-8525US | — | — | ||
An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST re… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-326-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-326-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationAutomated Logic SiteScan Web
Automated Logic has recommended the following:
- MitigationAutomated Logic SiteScan Web
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL Server
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL Server
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL for OEMs
Automated Logic has recommended the following:
- MitigationAutomated Logic WebCTRL for OEMs
Automated Logic has recommended the following:
- MitigationCarrier i-Vu
Automated Logic has recommended the following:
- MitigationCarrier i-Vu
Automated Logic has recommended the following:
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan