CVEvulnerability

CVE-2024-29837

8.8 HIGH Published 2024-04-15 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2024-04-15
Last modified: 2026-06-17
Assigner: 430a6cef-dc26-47e3-9fa8-52fb7f19644e
CVSS 3.1 (430a6cef-dc26-47e3-9fa8-52fb7f19644e): 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-1390, CWE-284, CWE-287

Description

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in.

Affected configurations

• cs-technologies evolution (<= 2.04.560)

Weakness · CWE (3)

CWE-1390 Weak Authentication weakness
CWE-284 Improper Access Control weakness
CWE-287 Improper Authentication weakness

References

https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html Third Party Advisory
https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html Third Party Advisory

CVE-2024-29837

Description

Affected configurations

Related

Weakness · CWE (3)

References