Skip to content
Noroxi

Carrier records

17 published records for vendor Carrier.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 21
  4. 22
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2022-31479
    40Plan

    Remote Code Execution via command injection of the hostname

    CriticalCVSS 9.8No exploitEPSS 2%

    hidglobal · lp1501 firmwareJun 6, 2022

  • CVE-2022-31481
    40Plan

    Remote Code Execution via buffer overflow in firmware update process

    CriticalCVSS 10.0No exploitEPSS 1%

    hidglobal · lp1501 firmwareJun 6, 2022

  • CVE-2022-31483
    36Monitor

    Arbitrary file write via authenticated OSDP file upload

    HighCVSS 8.8No exploitEPSS 1%

    hidglobal · lp1501 firmwareJun 6, 2022

  • CVE-2022-31486
    35Monitor

    Command injection via Advanced Networking route add functionality

    HighCVSS 8.8No exploitEPSS 1%

    hidglobal · lp1501 firmwareJun 6, 2022

  • CVE-2017-9650
    32Monitor

    An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web

    HighCVSS 7.8Proof of conceptEPSS 2%

    automatedlogic · i-vuAug 25, 2017

  • CVE-2018-8819
    31Monitor

    An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5.

    HighCVSS 7.5No exploitEPSS 2%

    carrier · automatedlogic webctrlJun 14, 2018

  • CVE-2016-5795
    30Monitor

    An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and pri

    HighCVSS 7.3No exploitEPSS 2%

    automatedlogic · i-vuAug 31, 2017

  • CVE-2022-31484
    30Monitor

    User Account Deletion Unauthenticated

    HighCVSS 7.5No exploitEPSS 1%

    hidglobal · lp1501 firmwareJun 6, 2022

  • CVE-2022-31482
    30Monitor

    Denial-of-Service via internal structure overflow

    HighCVSS 7.5No exploitEPSS 1%

    hidglobal · lp1501 firmwareJun 6, 2022

  • CVE-2022-31480
    30Monitor

    Unauthenticated Firmware Upload and Arbitrary Reboot

    HighCVSS 7.5No exploitEPSS 0%

    hidglobal · lp1501 firmwareJun 6, 2022

  • CVE-2017-9640
    28Monitor

    A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteSc

    MediumCVSS 6.3Proof of conceptEPSS 8%

    automatedlogic · i-vuAug 25, 2017

  • CVE-2017-9644
    28Monitor

    An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior;

    HighCVSS 7.0Proof of conceptEPSS 1%

    automatedlogic · i-vuAug 25, 2017

  • CVE-2024-10930
    28Monitor

    Carrier Block Load Privilege Escalation

    HighCVSS 7.1Proof of conceptEPSS 0%

    carrier · block loadMar 4, 2025

  • CVE-2020-19762
    24Monitor

    Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for

    MediumCVSS 6.1No exploitEPSS 1%

    carrier · webctrl systemFeb 22, 2021

  • CVE-2022-26519
    22Monitor

    Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts

    MediumCVSS 5.5No exploitEPSS 0%

    carrier · hills comnav firmwareApr 20, 2022

  • CVE-2022-1318
    22Monitor

    Hills ComNav Inadequate Encryption Strength

    MediumCVSS 5.5No exploitEPSS 0%

    carrier · hills comnav firmwareApr 20, 2022

  • CVE-2022-31485
    21Monitor

    Unauthenticated homepage note modification

    MediumCVSS 5.3No exploitEPSS 0%

    hidglobal · lp1501 firmwareJun 6, 2022