ICSA-25-324-01

icsaUScisa_csaf_ot

Automated Logic WebCTRL Premium Server

Advisory ansehen veröffentlicht 2025-11-20

Successful exploitation of these vulnerabilities could allow a remote attacker to deceive a legitimate user into running malicious scripts or redirecting them to malicious websites.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-8528US——
Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.
CVE-2024-8527US——
Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • MitigationAutomated Logic SiteScan Web

    Automated Logic has reported the following:

  • MitigationAutomated Logic SiteScan Web

    Automated Logic has reported the following:

  • MitigationAutomated Logic WebCTRL Server

    Automated Logic has reported the following:

  • MitigationAutomated Logic WebCTRL Server

    Automated Logic has reported the following:

  • MitigationAutomated Logic WebCTRL for OEMs

    Automated Logic has reported the following:

  • MitigationAutomated Logic WebCTRL for OEMs

    Automated Logic has reported the following:

  • MitigationCarrier i-Vu

    Automated Logic has reported the following:

  • MitigationCarrier i-Vu

    Automated Logic has reported the following:

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan