Open Redirect Vulnerability in Automated Logic WebCTRL and Carrier i-Vu Products
CVE-2024-8527

8.6HIGH

Key Information:

Vendor

Automated Logic

Status
Webctrl
I-vu
Vendor
CVE Published:
19 November 2025

What is CVE-2024-8527?

An open redirect vulnerability exists in the URL parameters of Automated Logic WebCTRL and Carrier i-Vu. This flaw could allow attackers to manipulate user session URLs, potentially leading to unauthorized access and session hijacking, posing serious security risks to users and system integrity.

Affected Version(s)

i-Vu Windows 6.0 <= 9.0

WebCtrl Windows 6.0 <= 9.0

References

https://www.corporate.carrier.com/product-security/adviso...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jaryl Low
Thuy D. Nguyen
Cynthia E. Irvine
JSON
.
CVE-2024-8527 : Open Redirect Vulnerability in Automated Logic WebCTRL and Carrier i-Vu Products