Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Automated Logic, a Carrier company Clear all filters
TI-2024-07903 CVE-2024-8525

Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload

Priority MEDIUM 52

An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a ma…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01433 Published 2024-11-21 No fix listed CWE-434
TI-2024-07904 CVE-2024-8526

Automated Logic WebCTRL and Carrier i-Vu Open Redirect

Priority LOW 27

A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously crafted URL, which when visited by an authenticated WebCTRL user, could result in the redirection of the user to a malicious we…

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00657 Published 2024-11-21 No fix listed CWE-601