← Back to browse · API

CVE-2024-8525

Severity
CRITICAL
CVSS
10.0
EPSS
0.0143
Risk score
40.5
CISA KEV
No
PoC
No
Published
2024-11-21
Modified
2024-11-21
First seen
2026-08-07
Aliases
EUVD-2024-49547
Products
Automated Logic:WebCTRL 7.0, Carrier:i-Vu 7.0
Sources
euvd EUVD-2024-49547

Description

An unrestricted upload of file with dangerous type in Automated Logic WebCTRL 7.0 could allow an unauthenticated user to perform remote command execution via a crafted HTTP POST request which could lead to uploading a malicious file.

References