← voltar
CVE-2024-8526

Automated Logic WebCTRL and Carrier i-Vu Open Redirect

CVSS 5.9 MEDIUMEPSS 0.6%CWE-601
A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously crafted URL, which when visited by an authenticated WebCTRL user, could result in the redirection of the user to a malicious webpage via "index.jsp"
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Automated Logic, a Carrier company · WebCTRLCarrier · i-Vu

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.cisa.gov/news-events/ics-advisories/https://www.corporate.carrier.com/product-security/advisories-resources/