CVE-2024-8525: Automated Logic, A Carrier Company Webctrl

Critical severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days.

An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file.

Affected products

• Automated Logic, A Carrier Company Webctrl: version 7.0 only
• Automatedlogic Webctrl: version 7.0 only
• Carrier I-Vu: version 7.0 only

Published 2024-11-21. Last modified 2026-06-17.