CVE-2024-8527

Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions.

Score

CVSS 4.0 8.6 High

Status

Deferred - productsecurity@carrier.com

Published

2025-11-19

Last modified

2025-11-19

Weaknesses

CWE-601

Affected products

• Webctrl (Automated Logic)
• I-vu (Carrier)

References

• https://www.corporate.carrier.com/product-security/advisories-resources/