Cs-Technologies Evolution

9 CVEs affecting Cs-Technologies Evolution. Latest disclosed: 2024-04-15. Critical: 2, High: 7.

Top CVEs affecting Cs-Technologies Evolution
CVESeverityScorePublishedSummary
CVE-2024-29844Critical9.82024-04-15Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon i…
CVE-2024-29836Critical9.82024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated att…
CVE-2024-29837High8.82024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to acce…
CVE-2024-29843High7.52024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing f…
CVE-2024-29842High7.52024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIE…
CVE-2024-29841High7.52024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS…
CVE-2024-29840High7.52024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS…
CVE-2024-29839High7.52024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_CARD, allow…
CVE-2024-29838High7.52024-04-15The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker…