Back to Database
Status published
High
CVE-2024-8527
ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter
Vulnerability Description
Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8527
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Jaryl Low
- Thuy D. Nguyen
- Cynthia E. Irvine
More from Automated Logic
View All →CVE-2025-14295
Automated Logic WebCTRL and Carrier i-Vu Session Fixation
High
7
CVE-2025-0658
Automated Logic and Carrier Zone Controllers malformed packets denial of service
High
8.7
CVE-2025-0657
ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range
High
8.8
CVE-2024-8528
ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter
Medium
5.4
CVE-2024-5540
ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting
Medium
6.9
Affected Vendor
Automated Logic
View all reports →Affected Software
WebCtrl, i-Vu
Vulnerable Versions:
6.0
Timeline
Official Publish:
November 19th, 2025
Last Modified:
November 19th, 2025
Added to House:
July 22nd, 2026