Skip to main content

CISA issues alert on Automated Logic WebCTRL premium server vulnerabilities

Source Decision Insights Threat Desk Published November 27, 2025 Companies 2
Human View Machine View

2 companies named across 9 categories, one of 15 articles referencing Logic. Previous coverage: CISA Releases 18 Industrial Control Systems Advisories (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority
Industry
Industrials / Capital Goods / Commercial Services & Supplies / Commercial Printing

Our classification, not the publisher's statement. Best suited for, not only for.

Automated Logic's WebCTRL Premium Server and associated products are affected by vulnerabilities involving open redirect and Cross-Site Scripting (XSS) weaknesses, potentially allowing attackers to redirect users to untrusted locations or execute harmful scripts.

The vulnerabilities include CVE-2024-8527, related to Open Redirect (CWE-601), affecting WebCTRL Server and Carrier i-Vu versions 6.1 through 8.5, along with Automated Logic SiteScan Web and Original Equipment Manufacturer (OEM) versions in the same range. This issue arises when the application accepts a user-supplied URL and redirects without validation. CVE-2024-8527 has Common Vulnerability Scoring System (CVSS) v3.1 and v4 base scores of 9.3 and 8.6, respectively. CVE-2024-8528 concerns XSS (CWE-79) due to insufficient sanitization of the “wbs” GET parameter in WebCTRL, impacting the same product versions. CVE-2024-8528 bears CVSS v3.1 and v4 scores of 7.5 and 5.4, respectively.

Exploitation may enable remote attackers to trick legitimate users into executing malicious scripts or redirect to harmful websites.

Automated Logic has addressed these issues in WebCTRL version 9.0. Earlier versions such as WebCTRL 6.1 and 7.0, and i-Vu 6.0 are no longer supported. Users are encouraged to upgrade to the fixed version and follow Automated Logic's security best practices documentation.

Users should reduce network exposure of control system devices, restrict internet accessibility, and use firewalls to isolate control networks from business systems. If remote access is necessary, more secure connections like VPNs should be employed, keeping in mind VPNs must be current and secured. Organizations are advised to conduct impact assessments before applying defenses.

Additional resources on control system security and cyber defense strategies are available, and suspected malicious activity should be reported to relevant authorities. Preventive measures against social engineering include avoiding clicking unsolicited links and attachments, as outlined in established guidelines. No public exploitation of these vulnerabilities has been reported, and these issues are not remotely exploitable.

Blog post, originally published by CISA at cisa.gov.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-issues-alert-on-automated-logic-webctrl-premium-server-vulnerabilities/",
        "name": "CISA issues alert on Automated Logic WebCTRL premium server vulnerabilities",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-issues-alert-on-automated-logic-webctrl-premium-server-vulnerabilities/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/logic/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/logic/",
      "name": "Logic"
    },
    "articleSection": [
      "Cybersecurity",
      "AI infrastructure",
      "Data Center",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Industrials / Capital Goods / Commercial Services & Supplies / Commercial Printing"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:11:31-06:00",
    "datePublished": "2025-11-27T11:28:28-07:00",
    "description": "Automated Logic's WebCTRL Premium Server vulnerabilities involve open redirect and XSS; fixes available in version 9.0; mitigation includes reducing network exposure.",
    "headline": "CISA issues alert on Automated Logic WebCTRL premium server vulnerabilities",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "CISA"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-01"
    },
    "keywords": [
      "Common Vulnerability Scoring System",
      "Cross-Site Scripting",
      "Original Equipment Manufacturer",
      "Server",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-automated-logic-webctrl-premium-server-vulnerabilities/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/logic/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/logic/",
        "name": "Logic"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages