CVEvulnerability

CVE-2024-58337

8.7 HIGH Published 2025-12-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-12-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
8.7 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-862

Description

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

Affected configurations

• akuvox s539 firmware 912.30.1.137 • akuvox s532 firmware 912.30.1.137 • akuvox x916 firmware 912.30.1.137 • akuvox x915 firmware 912.30.1.137 • akuvox x912 firmware 912.30.1.137 • akuvox r29 firmware 912.30.1.137 • akuvox e16c firmware 912.30.1.137 • akuvox r20k-2 firmware 912.30.1.137 • akuvox r20a-2 firmware 912.30.1.137 • akuvox c313w-2 firmware 912.30.1.137 • akuvox ns-2 firmware 912.30.1.137 • akuvox nc-2 firmware 912.30.1.137 • akuvox nx-2 firmware 912.30.1.137

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References