VULNERABILITY INTELLIGENCE
CVE-2024-58337
CVSS score4.3 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-12-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.
Weakness classification
- disclosure@vulncheck.com: CWE-862
Primary references
- disclosure@vulncheck.com — Third Party Advisory
- disclosure@vulncheck.com — Broken Link
- disclosure@vulncheck.com — Third Party Advisory
- disclosure@vulncheck.com — Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory