CVE-2026-24060
Unencrypted BACnet Traffic in WebCTRL Enables Data Interception
Publication date: 2026-03-21
Last updated on: 2026-03-23
Assigner: ICS-CERT
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-319 | The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the transmission of service information as BACnet packets over the network without encryption. Because the data is sent in clear text, an attacker can sniff, intercept, and modify the information being transmitted.
Specifically, sensitive details such as the File Start Position and File Data can be captured from network traffic using tools like Wireshark with its BACnet dissector filter. Additionally, the proprietary format used by WebCTRL to receive updates from the PLC can be intercepted and reverse engineered by an attacker.
How can this vulnerability impact me? :
The vulnerability can lead to serious security risks because attackers can capture and modify sensitive information transmitted over the network.
- Confidential information such as file positions and data can be exposed.
- Attackers can manipulate the intercepted data, potentially causing unauthorized changes or disruptions.
- Reverse engineering of proprietary formats may allow attackers to better understand and exploit the system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring network traffic for unencrypted BACnet packets. Tools like Wireshark can be used with the BACnet dissector filter to sniff and analyze BACnet packets, revealing sensitive information such as File Start Position and File Data.
- Use Wireshark with the BACnet dissector filter to capture and inspect BACnet traffic.
- Look for unencrypted service information transmitted over the network.
What immediate steps should I take to mitigate this vulnerability?
I don't know