VULNERABILITY INTELLIGENCE
CVE-2024-8525
EPSS probability1.43%
CISA KEVNot currently listed
Published2024-11-21
Last modified2026-06-17
Description
An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file.
Weakness classification
- productsecurity@carrier.com: CWE-434