CVE-2017-9640

A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to overwrite files that are used to execute code. This vulnerability does not affect version 6.5 of the software.

• CWE-22
• CWE-22

• http://www.securityfocus.com/bid/100452Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01Mitigation, Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/42543/Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/100452Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01Mitigation, Third Party Advisory, US Government Resource
• https://www.exploit-db.com/exploits/42543/Third Party Advisory, VDB Entry

Published

Aug 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9634Mitsubishi E-Designer, Version 7.52 Build 344 contains two c…
• CVE-2017-9635Schneider Electric Ampla MES 6.4 provides capability to conf…
• CVE-2017-9636Mitsubishi E-Designer, Version 7.52 Build 344 contains five …
• CVE-2017-9637Schneider Electric Ampla MES 6.4 provides capability to inte…
• CVE-2017-9638Mitsubishi E-Designer, Version 7.52 Build 344 contains six c…
• CVE-2017-9639An issue was discovered in Fuji Electric V-Server Version 3.…
• CVE-2017-9641PI Coresight 2016 R2 contains a cross-site request forgery v…
• CVE-2017-9644An Unquoted Search Path or Element issue was discovered in A…
• CVE-2017-9645An Inadequate Encryption Strength issue was discovered in Mi…
• CVE-2017-9646An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-9647A Stack-Based Buffer Overflow issue was discovered in the Co…
• CVE-2017-9648An Uncontrolled Search Path Element issue was discovered in …