CVE-2024-29836

CRITICAL

Evolution Controller <2.04.560.31.03.2024 - Info Disclosure

Title source: llm
STIX 2.1

Description

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the site.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0058
EPSS Percentile 43.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-284
Status published
Products (1)
cs-technologies/evolution < 2.04.560
Published Apr 15, 2024
Tracked Since Feb 18, 2026