What’s Vulnerable › Products

CS Technologies Australia Evolution Controller vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your CS Technologies Australia Evolution Controller version is affected

Latest CS Technologies Australia Evolution Controller vulnerabilities

• CVE-2024-29844 — Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions (CVSS 9.8)
• CVE-2024-29843 — Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration (CVSS 7.5)
• CVE-2024-29842 — Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values (CVSS 7.5)
• CVE-2024-29841 — Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys values (CVSS 7.5)
• CVE-2024-29840 — Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values (CVSS 7.5)
• CVE-2024-29839 — Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values. (CVSS 7.5)
• CVE-2024-29838 — Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash (CVSS 7.5)
• CVE-2024-29837 — Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections (CVSS 8.8)
• CVE-2024-29836 — Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover (CVSS 9.8)