Description
A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously
crafted URL, which when visited by an authenticated WebCTRL user, could result in the redirection
of the user to a malicious webpage via "index.jsp"
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Automated Logic, a Carrier company | WebCTRL | 7.0 | — |
| Carrier | i-Vu | 7.0 | — |
Advisories 1
- ICSA-24-326-01 Automated Logic WebCTRL Premium Server CISA ICS & IT advisories · Nov 21, 2024
References
- https://www.corporate.carrier.com/product-security/advisories-resources/ vendor-advisory
- https://www.cisa.gov/news-events/ics-advisories/ government-resource