High ICSA-17-234-01 3 CVEs

Automated Logic Corporation WebCTRL, i-VU, SiteScan

Published Aug 22, 2017 · Updated Aug 22, 2017

Vendor: Automated Logic Corporation (ALC) Product: ALC WebCTRL i-Vu Product: ALC WebCTRL i-Vu SiteScan Web Product: ALC WebCTRL SiteScan Web

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

Unscored —

CVE-2017-9640 Public exploit

A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5…

Aug 25, 2017
Unscored —

CVE-2017-9644 Public exploit

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteSca…

Aug 25, 2017
Unscored —

CVE-2017-9650 Public exploit

An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTR…

Aug 25, 2017

Revision history

2017-08-22 #1
ICSA-17-234-01 Automated Logic Corporation WebCTRL, i-VU, SiteScan

References

ICS Advisory ICSA-17-234-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-234-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-234-01