Carrier

Products

ProductCVEsExploitedLatest
i-Vu8–Jan 22, 2026
Block Load1–Mar 4, 2025
Zone Controllers1–Nov 27, 2025

Exploited and recent CVEs

  • CVE-2025-14295 High 7.0 Automated Logic WebCTRL and Carrier i-Vu Session Fixation 0.2%
  • CVE-2024-5540 Medium 6.9 ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting 0.3%
  • CVE-2024-5539 Critical 9.2 ALC WebCTRL Carrier i-Vu Access Control Bypass 0.4%
  • CVE-2025-0657 High 8.8 ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range 0.4%
  • CVE-2025-0658 High 8.7 Automated Logic and Carrier Zone Controllers malformed packets denial of service 0.4%
  • CVE-2024-8528 Medium 5.4 ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter 0.1%
  • CVE-2024-8527 High 8.6 ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter 0.2%
  • CVE-2024-10930 High 7.1 Carrier Block Load Privilege Escalation 0.4%
  • CVE-2024-8525 Critical 10.0 Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload 1.4%
  • CVE-2024-8526 Medium 5.9 Automated Logic WebCTRL and Carrier i-Vu Open Redirect 0.7%