# CVE-2026-24060

## Summary

- **CVE ID:** CVE-2026-24060
- **Severity:** CRITICAL
- **CVSS Score:** 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
- **CWE:** CWE-319
- **Published:** Mar 20, 2026
- **Last Modified:** Mar 23, 2026

## Description

Service information is not encrypted when transmitted as BACnet packets 
over the wire, and can be sniffed, intercepted, and modified by an 
attacker. Valuable information such as the File Start Position and File 
Data can be sniffed from network traffic using Wireshark's BACnet 
dissector filter. The proprietary format used by WebCTRL to receive 
updates from the PLC can also be sniffed and reverse engineered.

## Affected Products

- Automated Logic — WebCTRL Premium Server (0)

## References

- [CNA](https://www.automatedlogic.com/en/company/security-commitment/)
- [CNA](https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-08)
- [CNA](https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-078-08.json)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.20%
- **EPSS Percentile:** 9.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._