VULNERABILITY INTELLIGENCE
CVE-2024-5539
EPSS probability0.36%
CISA KEVNot currently listed
Published2025-11-27
Last modified2026-06-17
Description
The Access Control Bypass vulnerability found in ALC WebCTRL and Carrier i-Vu in versions up to and including 8.5 allows a malicious actor to bypass intended access restrictions and expose sensitive information via the web based building automation server.
Weakness classification
- productsecurity@carrier.com: CWE-863