VULNERABILITY INTELLIGENCE

CVE-2024-29837

CVSS score8.8 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2024-04-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in.

Weakness classification

  • 430a6cef-dc26-47e3-9fa8-52fb7f19644e: CWE-284
  • nvd@nist.gov: CWE-287

Primary references