CVE-2024-8525: falha crítica em Automated Logic, a Carrier company WebCTRL
Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 10epss 1.4%
An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVEs relacionadas — Automated Logic, a Carrier company WebCTRL
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8526MEDIUMAutomated Logic WebCTRL and Carrier i-Vu Open RedirectEPSS 0.7%CVE-2025-0657HIGHALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-rangeEPSS 0.4%CVE-2024-5539CRITICALALC WebCTRL Carrier i-Vu Access Control BypassEPSS 0.4%CVE-2024-5540MEDIUMALC WebCTRL Carrier i-Vu Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-8527HIGHALC WebCTRL Carrier i-Vu Open Redirect via URL parameterEPSS 0.2%CVE-2025-14295HIGHAutomated Logic WebCTRL and Carrier i-Vu Session FixationEPSS 0.2%