CVE-2024-5540 — ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting

CVE-2024-5540

ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .

Affected (CNA)

Vendor / product	Versions
Automated Logic / WebCTRL	affected 0 before 8.0
Carrier / i-Vu	affected 0 before 8.0

CWE

CWE-79

References

https://www.corporate.carrier.com/product-security/advisories-resources/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.