VULNERABILITY INTELLIGENCE
CVE-2024-33898
CVSS score9.8 CRITICAL
EPSS probability0.73%
CISA KEVNot currently listed
Published2024-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Axiros AXESS Auto Configuration Server (ACS) 4.x and 5.0.0 is affected by an Incorrect Access Control vulnerability. An authorization bypass allows remote attackers to achieve unauthenticated remote code execution.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284