High · 8.6 CVE-2024-8527 EUVD-2024-55098GHSA-99hf-fcc2-gwm3

ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

Published Nov 19, 2025 · Updated Nov 19, 2025 · Assigned by Carrier

Vendor: Automated Logic Vendor: Carrier Product: i-Vu Product: WebCTRL

Description

Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions.

Affected products

Vendor	Product	Affected	Fixed
Automated Logic	WebCtrl	6.0 – ≤ 9.0	—
Carrier	i-Vu	6.0 – ≤ 9.0	—

Advisories 1

ICSA-25-324-01 Automated Logic WebCTRL Premium Server CISA ICS & IT advisories · Nov 20, 2025

References

https://www.corporate.carrier.com/product-security/advisories-resources/