Automated Logic Webctrl Premium Server
3 CVEs affecting Automated Logic Webctrl Premium Server. Latest disclosed: 2026-03-21. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24060 | Critical | 9.1 | 2026-03-21 | Service information is not encrypted when transmitted as BACnet packets over the wire, and can be sniffed, intercepted, and modified by an attacker. Valuable… |
CVE-2026-25086 | High | 7.7 | 2026-03-21 | Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impe… |
CVE-2026-32666 | High | 7.5 | 2026-03-21 | WebCTRL systems that communicate over BACnet inherit the protocol's lack of network layer authentication. WebCTRL does not implement additional validation of… |