CVE-2024-8527 HIGH

CVE-2024-8527: ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

Vendor Automated Logic

Product WebCtrl

Weakness CWE-601 · Open redirect

Published November 19, 2025

Last update November 19, 2025

View on NVD All CVEs

CVSS base score

8.6/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

What the vulnerability does

01Description

Open Redirect in URL parameter in Automated Logic WebCTRL and Carrier i-Vu versions 6.0, 6.5, 7.0, 8.0, 8.5, 9.0 may allow attackers to exploit user sessions.

Key dates

02Disclosure timeline

November 19, 2025 CVE published

November 19, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-8527 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/601.html

Related vulnerabilities

Identifiers

CVE CVE-2024-8527

CWE CWE-601

CVSS 8.6 / HIGH

Affected versions

Vendor Automated Logic

Product WebCtrl

Affected ≥ 6.0 and ≤ 9.0

Vendor Carrier

Product i-Vu

Affected ≥ 6.0 and ≤ 9.0

CVE-2024-8527: ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

01Description

02Disclosure timeline

03References

04Related CVE