← All advisories

Medium severityNVD Advisory· Published Nov 27, 2025· Updated Apr 15, 2026

CVE-2024-5540

CVE-2024-5540

Description

The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a

malicious actor to compromise the client browser

.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Automated Logic/I Vullm-fuzzy
Range: <8.0
Automated Logic/WebCTRLllm-fuzzy
Range: <8.0

Patches

Vulnerability mechanics

References

1

www.corporate.carrier.com/product-security/advisories-resources/nvd

News mentions

0

No linked articles in our index yet.