CVE-2025-14295

HIGH

Automated Logic WebCTRL and Carrier i-Vu Session Fixation

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-14295 has a selected CVSS score of 7.0 (high).

Description

Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. Storing Passwords in a Recoverable Format vulnerability (CWE-257) in the Web session management component allows an attacker to access stored passwords in a recoverable format which makes them subject to password reuse attacks by malicious users.This issue affects WebCTRL: from 6.0 through 9.0; i-Vu: from 6.0 through 9.0.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 22, 2026 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

WebCTRL

Browse Automated Logic / WebCTRL

Default status: unaffected

CVE List6.0 to ≤ 9.0affected

i-Vu

Browse Carrier / i-Vu

Default status: unaffected

CVE List6.0 to ≤ 9.0affected

References

2