Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: CS Technologies Australia Component: Evolution Clear all filters
TI-2024-19618 CVE-2024-29843 · GHSA-2rfp-5w3v-6w75

Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration

Priority LOW 39

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing for an unauthenticated attacker to enumerate all users and the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2024-04-14 No fix listed CWE-200
TI-2024-19617 CVE-2024-29842 · GHSA-c43g-9f5q-rqx4

Information disclosure in CS Technologies Australia Evolution Controller

Priority LOW 39

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS, allowing for an unauthenticated attacker to return the a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2024-04-14 No fix listed CWE-200
TI-2024-19616 CVE-2024-29841 · GHSA-vx2h-v5x8-fp94

Information disclosure in CS Technologies Australia Evolution Controller

Priority LOW 39

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS, allowing for an unauthenticated attacker to return the keys…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2024-04-14 No fix listed CWE-200
TI-2024-19615 CVE-2024-29840 · GHSA-79c8-vq74-47fc

Information disclosure in CS Technologies Australia Evolution Controller

Priority LOW 39

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2024-04-14 No fix listed CWE-200
TI-2024-19614 CVE-2024-29839 · GHSA-72c6-gcpg-6rw3

Information disclosure in CS Technologies Australia Evolution Controller

Priority LOW 39

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_CARD, allowing for an unauthenticated attacker to return the card value…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2024-04-14 No fix listed CWE-200
TI-2024-19612 CVE-2024-29837 · GHSA-8f6g-63pm-5fmx

Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections

Priority MEDIUM 45

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already s…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00511 Published 2024-04-14 No fix listed CWE-1390
TI-2024-19611 CVE-2024-29836 · GHSA-8vcp-v22r-9p96

Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover

Priority MEDIUM 50

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00583 Published 2024-04-14 No fix listed CWE-284