Vertiv Liebert SiteScan Cross-site Scripting (CVE-2024-5540)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505513);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/25");

  script_cve_id("CVE-2024-5540");

  script_name(english:"Vertiv Liebert SiteScan Cross-site Scripting (CVE-2024-5540)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"CWE-79 Improper Neutralization of Input During Web Page Generation
('Cross-site Scripting') vulnerability exists in Automated Logic
WebCTRL and Carrier i-Vu Building Automation System products in
versions older than 8.0. Untrusted data is included in web pages
without proper validation, allowing attackers to execute malicious
scripts in the user's browser.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://brandportal.carrier.com/m/26e2139889c374cf/original/carr-psa-2025-03.pdf
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4bedf100");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Automated Logic WebCTRL or Carrier i-Vu version 8.0 or
later. Versions 7.0, 6.5, and 6.1 are no longer supported.");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-5540");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(79);

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/11/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/11/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/23");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:automatedlogic:sitescan_web");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Vertiv");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Vertiv');

var asset = tenable_ot::assets::get(vendor:'Vertiv');

var vuln_cpes = {
    "cpe:/a:automatedlogic:sitescan_web" :
        {"versionStartIncluding" : "6.1", "versionEndIncluding" : "8.5", "family" : "LiebertSiteScan"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);