Carrier Global Corporation's vulnerability profile centers on a focused line of physical access-control and security devices, particularly its Lenses2 series of networked controllers and credential readers deployed in building management and enterprise facilities. Vulnerabilities affecting these products skew toward serious outcomes and frequently acquire public exploit code, recuring across weakness classes including direct request exploitation, buffer overflows, path traversal, OS command injection, and XML external entity reference handling—characteristic of embedded firmware and legacy security appliances with limited input validation and access controls. Defenders should prioritize patching these networked devices and restrict their administrative and management interfaces; live severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Carrier Global Corporation over time
Of all the CVEs published by Carrier Global Corporation as a CNA, 37.5% affect products that Carrier Global Corporation develops as a vendor.
Of all the CVEs published that affect products developed by Carrier Global Corporation, 52.9% are self-published by Carrier Global Corporation as a CNA.
Signals from CVEs in this vendor scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-9650HIGH An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan We | Aug 25, 2017 | 7.8 | 36 | NO | YES |
CVE-2017-9640MEDIUM A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu | Aug 25, 2017 | 6.3 | 35 | NO | YES |
CVE-2017-9644HIGH An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; | Aug 25, 2017 | 7.0 | 33 | NO | YES |
CVE-2022-31479CRITICAL An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during the core collection process. This vulnera | Jun 6, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-31486HIGH An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulnerability impacts products based on HID Mer | Jun 6, 2022 | 8.8 | 27 | NO | NO |
CVE-2022-31483HIGH An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem. This vulnerability | Jun 6, 2022 | 8.8 | 27 | NO | NO |
CVE-2018-8819HIGH An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly | Jun 14, 2018 | 7.5 | 26 | NO | NO |
CVE-2024-10930HIGH An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges. | Mar 4, 2025 | 7.8 | 25 | NO | NO |
CVE-2022-31481CRITICAL An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts products based on HID Mercury Intelligent | Jun 6, 2022 | 10.0 | 25 | NO | NO |
CVE-2022-31484HIGH An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on HID Mercury Intelligen | Jun 6, 2022 | 7.5 | 24 | NO | NO |
Signals from CVEs in this vendor scope (17 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Carrier Global Corporation.
Media articles that mention a CVE ID that affects a product developed by Carrier Global Corporation — matched by CVE ID, not by vendor name.