Carrier vulnerabilities

Products

• I-vu 8
• Lenels2 Lnl-4420 Firmware 8
• Lenels2 Lnl-x2210 Firmware 8
• Lenels2 Lnl-x2220 Firmware 8
• Lenels2 Lnl-x3300 Firmware 8
• Lenels2 Lnl-x4420 Firmware 8
• Lenels2 S2-lp-1501 Firmware 8
• Lenels2 S2-lp-1502 Firmware 8
• Lenels2 S2-lp-2500 Firmware 8
• Lenels2 S2-lp-4502 Firmware 8
• Automatedlogic Webctrl 5
• Lenels2 Netbox 3
• Hills Comnav Firmware 2

Newest

• automated logic webctrl, carrier i-vu +1 more Automated Logic WebCTRL and Carrier i-Vu Session Fixation CVE-2025-14295 7.0 HighJanuary 22, 2026
• automated logic webctrl, carrier i-vu +1 more ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting CVE-2024-5540 6.9 MediumNovember 27, 2025
• automated logic webctrl, carrier i-vu +1 more ALC WebCTRL Carrier i-Vu Access Control Bypass CVE-2024-5539 9.2 CriticalNovember 27, 2025
• automated logic gen5 controllers, webctrl, carrier i-vu +2 more ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range CVE-2025-0657 8.8 HighNovember 27, 2025
• automated logic zone controllers Automated Logic and Carrier Zone Controllers malformed packets denial of service CVE-2025-0658 8.7 HighNovember 27, 2025
• automated logic webctrl, carrier i-vu +1 more ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter CVE-2024-8528 5.4 MediumNovember 19, 2025
• automated logic webctrl, carrier i-vu +1 more ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter CVE-2024-8527 8.6 HighNovember 19, 2025
• carrier block load Carrier Block Load Privilege Escalation CVE-2024-10930 Public exploit 7.1 HighMarch 4, 2025
• automated logic webctrl, carrier i-vu +1 more Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload CVE-2024-8525 10.0 CriticalNovember 21, 2024
• automated logic webctrl, carrier i-vu +1 more Automated Logic WebCTRL and Carrier i-Vu Open Redirect CVE-2024-8526 5.9 MediumNovember 21, 2024
• carrier lenels2 netbox, lenels2 netbox +1 more LenelS2 NetBox Improper Neutralization of Argumented Delimiters CVE-2024-2422 9.3 CriticalMay 30, 2024
• carrier lenels2 netbox, lenels2 netbox +1 more LenelS2 NetBox Improper Neutralization of Special Elements CVE-2024-2421 9.3 CriticalMay 30, 2024
• carrier lenels2 netbox, lenels2 netbox +1 more LenelS2 NetBox Hardcoded Credentials CVE-2024-2420 8.8 HighMay 30, 2024
• carrier masmobile classic, mas asp.net services, honeywell masmobile asp.net services +1 more +3 more MAS (a Carrier brand) MASmobile Classic Authorization Bypass CVE-2023-36483 6.5 MediumMarch 16, 2024
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more Command injection via Advanced Networking route add functionality CVE-2022-31486 8.8 HighJune 6, 2022
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more Unauthenticated homepage note modification CVE-2022-31485 5.3 MediumJune 6, 2022
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more User Account Deletion Unauthenticated CVE-2022-31484 7.5 HighJune 6, 2022
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more Arbitrary file write via authenticated OSDP file upload CVE-2022-31483 9.1 CriticalJune 6, 2022
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more Denial-of-Service via internal structure overflow CVE-2022-31482 7.5 HighJune 6, 2022
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more Remote Code Execution via buffer overflow in firmware update process CVE-2022-31481 10.0 CriticalJune 6, 2022
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more Unauthenticated Firmware Upload and Arbitrary Reboot CVE-2022-31480 7.5 HighJune 6, 2022
• hid mercury ep4502, lp1501, lp1502 +25 more +27 more Remote Code Execution via command injection of the hostname CVE-2022-31479 9.6 CriticalJune 6, 2022
• interlogix hills comnav, carrier hills comnav firmware +1 more Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts CVE-2022-26519 5.5 MediumApril 20, 2022
• interlogix comnav, carrier hills comnav firmware +1 more Hills ComNav Inadequate Encryption Strength CVE-2022-1318 6.2 MediumApril 20, 2022
• carrier webctrl system Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute... CVE-2020-19762 6.1 MediumFebruary 22, 2021
• carrier automatedlogic webctrl An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6... CVE-2018-8819 7.5 HighJune 14, 2018
• automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 more An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5... CVE-2016-5795 7.3 HighAugust 31, 2017
• automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 more An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic... CVE-2017-9650 Public exploit 7.8 HighAugust 25, 2017
• automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 more An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC... CVE-2017-9644 Public exploit 7.0 HighAugust 25, 2017
• automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 more A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu,... CVE-2017-9640 Public exploit 6.3 MediumAugust 25, 2017