Back to Database
Status published
Critical
CVE-2024-8525
Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload
Vulnerability Description
An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8525
Credits & Attribution
No credits recorded in the NVD database.
References
More from Automated Logic, a Carrier company
View All →Affected Vendor
Automated Logic, a Carrier company
View all reports →Affected Software
WebCTRL, i-Vu
Vulnerable Versions:
7.0
Timeline
Official Publish:
November 21st, 2024
Last Modified:
November 21st, 2024
Added to House:
July 22nd, 2026