Vertiv Liebert SiteScan Incorrect Authorization (CVE-2024-5539)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505507);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/25");

  script_cve_id("CVE-2024-5539");

  script_name(english:"Vertiv Liebert SiteScan Incorrect Authorization (CVE-2024-5539)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"CWE-863 Incorrect Authorization vulnerability exists in Automated
Logic WebCTRL and Carrier i-Vu Building Automation System products.
The system fails to perform adequate authorization checks, allowing
an actor to perform actions or access resources without proper
entitlement, leading to unauthorized access to sensitive information
or functionality.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://brandportal.carrier.com/m/26e2139889c374cf/original/carr-psa-2025-03.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4bedf100");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Automated Logic WebCTRL or Carrier i-Vu version 8.0 or
later. Versions 7.0, 6.5, and 6.1 are no longer supported.");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-5539");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(863);

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/11/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/11/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/23");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:automatedlogic:sitescan_web");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Vertiv");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Vertiv');

var asset = tenable_ot::assets::get(vendor:'Vertiv');

var vuln_cpes = {
    "cpe:/a:automatedlogic:sitescan_web" :
        {"versionStartIncluding" : "6.1", "versionEndIncluding" : "8.5", "family" : "LiebertSiteScan"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);