CVE-2016-5795

HIGH 7.3CVE-2016-5795 · Published 31/08/2017 · updated 17/06/2026

In short

CVE-2016-5795 is a HIGH (CVSS 7.3) vulnerability affecting i-vu (automatedlogic), sitescan web (automatedlogic), automatedlogic webctrl (carrier).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
i-vu automatedlogic	`≤ 6.5`	No fix yet
sitescan web automatedlogic	`≤ 6.5`	No fix yet
automatedlogic webctrl carrier	`≤ 6.5`	No fix yet

Description

An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or connected network.

References

securityfocus.com/bid/100558 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-17-150-01 · Mitigation

More vulnerabilities in i-vu

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2016-5795 is a HIGH (CVSS 7.3) vulnerability affecting i-vu (automatedlogic), sitescan web (automatedlogic), automatedlogic webctrl (carrier).

Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.8% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

i-vu

automatedlogic

≤ 6.5

No fix yet

sitescan web

automatedlogic

≤ 6.5

No fix yet

automatedlogic webctrl

carrier

≤ 6.5

No fix yet

Description

More vulnerabilities in i-vu

See all →