CVE-2024-8528: falha de média gravidade em Automated Logic WebCtrl
ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.1%
Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
CVEs relacionadas — Automated Logic WebCtrl
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8525CRITICALAutomated Logic WebCTRL and Carrier i-Vu Unrestricted File UploadEPSS 1.4%CVE-2024-8526MEDIUMAutomated Logic WebCTRL and Carrier i-Vu Open RedirectEPSS 0.7%CVE-2025-0657HIGHALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-rangeEPSS 0.4%CVE-2024-5539CRITICALALC WebCTRL Carrier i-Vu Access Control BypassEPSS 0.4%CVE-2024-5540MEDIUMALC WebCTRL Carrier i-Vu Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-8527HIGHALC WebCTRL Carrier i-Vu Open Redirect via URL parameterEPSS 0.2%