CVE-2024-5539 — ALC WebCTRL Carrier i-Vu Access Control Bypass

CVE-2024-5539

ALC WebCTRL Carrier i-Vu Access Control Bypass PUBLISHED

Description (CNA)

The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a malicious actor to bypass intended access restrictions and expose sensitive information via the web based building automation server.

Affected (CNA)

Vendor / product	Versions
Automated Logic / WebCTRL	affected 0 through 8.5
Carrier / i-Vu	affected 0 through 8.5

CWE

CWE-863

References

https://www.corporate.carrier.com/product-security/advisories-resources/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.