CVE-2025-14295CWE-257

Automated Logic WebCTRL and Carrier i-Vu Session Fixation

High · published January 22, 2026

CVSS v4.0
7.0
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. Storing Passwords in a Recoverable Format vulnerability (CWE-257) in the Web session management component allows an attacker to access stored passwords in a recoverable format which makes them subject to password reuse attacks by malicious users.This issue affects WebCTRL: from 6.0 through 9.0; i-Vu: from 6.0 through 9.0.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:N/SA:N
EPSS
0.00162 · 5.1th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2026-01-22T12:52Z
EPSS history
Timeline
  • 22 JAN 12:52Z
    Automated Logic WebCTRL and Carrier i-Vu Session Fixation
    cvelistv5