Vulnerabilities in Carrier
10 resultsVexday analysis
Carrier apresenta 10 vulnerabilidades registradas, com 2 classificadas como críticas, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante é redirecionamento não validado (CWE-601), padrão em aplicações web. O risco é estável, sem novos registros nos últimos 90 dias, indicando paisagem de segurança relativamente madura para o fornecedor.
CVE-2024-8525CRITICALAutomated Logic WebCTRL and Carrier i-Vu Unrestricted File UploadEPSS 1.4%CVE-2024-8526MEDIUMAutomated Logic WebCTRL and Carrier i-Vu Open RedirectEPSS 0.6%CVE-2024-10930HIGHCarrier Block Load Privilege EscalationEPSS 0.4%CVE-2025-0657HIGHALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-rangeEPSS 0.3%CVE-2025-0658HIGHAutomated Logic and Carrier Zone Controllers malformed packets denial of serviceEPSS 0.3%CVE-2024-5539CRITICALALC WebCTRL Carrier i-Vu Access Control BypassEPSS 0.3%CVE-2024-5540MEDIUMALC WebCTRL Carrier i-Vu Reflected Cross-Site ScriptingEPSS 0.3%CVE-2025-14295HIGHAutomated Logic WebCTRL and Carrier i-Vu Session FixationEPSS 0.2%CVE-2024-8527HIGHALC WebCTRL Carrier i-Vu Open Redirect via URL parameterEPSS 0.2%CVE-2024-8528MEDIUMALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameterEPSS 0.1%