Skip to content
OpenAdvisories

Vendor

Carrier

10 known vulnerabilities.

Products

i-Vu 8 Block Load 1 Zone Controllers 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2024-5539

    ALC WebCTRL Carrier i-Vu Access Control Bypass

    The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a malicious actor to bypass intended access restrictions and expose sensitive information via the web based building automation server.

    Automated Logic Carrier i-Vu WebCTRL
  • Critical 10.0
    CVE-2024-8525

    Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload

    An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file.

    Carrier Automated Logic, a Carrier company i-Vu WebCTRL