Skip to content
OpenAdvisories

Vendor

Automated Logic

11 known vulnerabilities.

Products

WebCTRL 6 WebCTRL Premium Server 3 Gen5 Controllers 1 WebCtrl Server 1 Zone Controllers 1 Carrier i-Vu 0 SiteScan Web 0 WebCTRL for OEMs 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-24060

    Automated Logic WebCTRL Premium Server Cleartext Transmission of Sensitive Information

    Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by an attacker. Valuable information such as the File Start Position and File Data can be sniffed from network traffic using W…

    Automated Logic WebCTRL Premium Server
  • Critical 9.2
    CVE-2024-5539

    ALC WebCTRL Carrier i-Vu Access Control Bypass

    The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a malicious actor to bypass intended access restrictions and expose sensitive information via the web based building automation server.

    Automated Logic Carrier i-Vu WebCTRL