Skip to content
OpenAdvisories

Product · Automated Logic

WebCTRL

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2025-14295

    Automated Logic WebCTRL and Carrier i-Vu Session Fixation

    Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. Storing Passwords in a Recoverable Format vulnerability (CWE-257) in the Web session management component allows an attacker to access stor…

    Automated Logic Carrier i-Vu WebCTRL
  • High 8.8
    CVE-2025-0657

    ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range

    A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver version drv_gen5_106-01-2380, allows malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to r…

    Automated Logic Carrier i-Vu WebCTRL
  • High 8.6
    CVE-2024-8527

    ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

    Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions.

    Automated Logic Carrier i-Vu WebCTRL