CA
Vendor
Carrier
90
CVEs
0
On KEV
0
New 30D
Products
IV10.0
i-Vu
Carrier
8 CVEs0 on KEV0 new
LL10.0
Lenels2 Lnl-4420 Firmware
Carrier
8 CVEs0 on KEV0 new
LL10.0
Lenels2 Lnl-x2210 Firmware
Carrier
8 CVEs0 on KEV0 new
LL10.0
Lenels2 Lnl-x2220 Firmware
Carrier
8 CVEs0 on KEV0 new
LL10.0
Lenels2 Lnl-x3300 Firmware
Carrier
8 CVEs0 on KEV0 new
LL10.0
Lenels2 Lnl-x4420 Firmware
Carrier
8 CVEs0 on KEV0 new
LS10.0
Lenels2 S2-lp-1501 Firmware
Carrier
8 CVEs0 on KEV0 new
LS10.0
Lenels2 S2-lp-1502 Firmware
Carrier
8 CVEs0 on KEV0 new
LS10.0
Lenels2 S2-lp-2500 Firmware
Carrier
8 CVEs0 on KEV0 new
LS10.0
Lenels2 S2-lp-4502 Firmware
Carrier
8 CVEs0 on KEV0 new
AW7.8
Automatedlogic Webctrl
Carrier
5 CVEs0 on KEV0 new
HC5.5
Hills Comnav Firmware
Carrier
2 CVEs0 on KEV0 new
BL7.8
Block Load
Carrier
1 CVEs0 on KEV0 new
WS6.1
Webctrl System
Carrier
1 CVEs0 on KEV0 new
ZC8.7
Zone Controllers
Carrier
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-14295 | IV i-Vu Carrier | 7.0 | Jan 22 | Automated Logic WebCTRL and Carrier i-Vu Session Fixation |
| CVE-2024-5540 | IV i-Vu Carrier | 6.9 | Nov 27 | ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting |
| CVE-2024-5539 | IV i-Vu Carrier | 9.2 | Nov 27 | ALC WebCTRL Carrier i-Vu Access Control Bypass |
| CVE-2025-0657 | IV i-Vu Carrier | 8.8 | Nov 27 | ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range |
| CVE-2025-0658 | ZC Zone Controllers Carrier | 8.7 | Nov 27 | Automated Logic and Carrier Zone Controllers malformed packets denial of service |
| CVE-2024-8528 | IV i-Vu Carrier | 5.4 | Nov 19 | ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter |
| CVE-2024-8527 | IV i-Vu Carrier | 8.6 | Nov 19 | ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter |
| CVE-2024-10930 | BL Block Load Carrier | 7.8 | Mar 4 | Carrier Block Load Privilege Escalation |
| CVE-2024-8525 | IV i-Vu Carrier | 10.0 | Nov 21 | Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload |
| CVE-2024-8526 | IV i-Vu Carrier | 5.9 | Nov 21 | Automated Logic WebCTRL and Carrier i-Vu Open Redirect |
| CVE-2022-31486 | LL Lenels2 Lnl-x2210 Firmware Carrier | 8.8 | Jun 6 | An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands |
| CVE-2022-31485 | LL Lenels2 Lnl-4420 Firmware Carrier | 5.3 | Jun 6 | An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface |
| CVE-2022-31484 | LL Lenels2 Lnl-x2210 Firmware Carrier | 7.5 | Jun 6 | An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface |
| CVE-2022-31483 | LL Lenels2 Lnl-x2210 Firmware Carrier | 8.8 | Jun 6 | An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem |
| CVE-2022-31482 | LL Lenels2 Lnl-4420 Firmware Carrier | 7.5 | Jun 6 | An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer |
| CVE-2022-31481 | LL Lenels2 Lnl-4420 Firmware Carrier | 10.0 | Jun 6 | An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer |
| CVE-2022-31480 | LL Lenels2 Lnl-4420 Firmware Carrier | 7.5 | Jun 6 | An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS) |
| CVE-2022-31479 | LS Lenels2 S2-lp-2500 Firmware Carrier | 9.8 | Jun 6 | An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process |
| CVE-2022-26519 | HC Hills Comnav Firmware Carrier | 5.5 | Apr 20 | There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to… |
| CVE-2022-1318 | HC Hills Comnav Firmware Carrier | 5.5 | Apr 20 | Hills ComNav version 3002-19 suffers from a weak communication channel |
| CVE-2020-19762 | WS Webctrl System Carrier | 6.1 | Feb 22 | Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request |
| CVE-2018-8819 | AW Automatedlogic Webctrl Carrier | 7.5 | Jun 14 | An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5 |
| CVE-2016-5795 | AW Automatedlogic Webctrl Carrier | 7.3 | Aug 31 | An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and… |
| CVE-2017-9650 | AW Automatedlogic Webctrl Carrier | 7.8 | Aug 25 | An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan… |
| CVE-2017-9644 | AW Automatedlogic Webctrl Carrier | 7.0 | Aug 25 | An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and… |
| CVE-2017-9640 | AW Automatedlogic Webctrl Carrier | 6.3 | Aug 25 | A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu… |