CVE-2017-9650

An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu,...

CVE-2017-9640

A Path Traversal issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An...

CVE-2017-9644

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5....

CVE-2017-9644

CVE-2017-9644 — Normal mode Affected products (as per connected docs): Automated Logic Corporation WebCTRL, i-Vu, SiteScan Web 6.5 and prior; 6.1 and prior; 6.0 and prior; 5.5 and prior; 5.2 and prior. Root cause: An Unquoted Search Path or Element vulnerability in the installation paths. Impact:...

ALC WebCTRL i-Vu/SiteScan Web Unreferenced Search Path Vulnerability

ALC WebCTRL is the building automation platform. ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior versions suffer from an un-referenced search path vulnerability in their implementation, which allows an authenticated user to elevate privileges and execute arbitrary code on the system...