CVE-2017-9650
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.4%
from disclosure to weapon0 days
Published on NVDAug 25
1st PoCAug 22
exploitation probability
2.4%top 18% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to upload a malicious file allowing the execution of arbitrary code.
Affected products
n/a · Automated Logic Corporation WebCTRL, i-VU, SiteScanpublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/42544unverifiedcve_referencewww.exploit-db.com/exploits/42544/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.