automatedlogic webctrl vulnerabilities

Latest automatedlogic webctrl CVEs

Newest publication first

1. CVE-2024-8525 Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload

   Published 2024-11-21

   Critical·CVSS 10.0 EPSS 1.4%

   An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file.

2. CVE-2021-31682 The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized....

   Published 2021-10-22

   Medium·CVSS 6.1 EPSS 10.5% Public exploit

   The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a bas...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.