CS Technologies Australia Evolution Controller

• CVE-2024-29844 Critical 9.8 Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions 0.6%
• CVE-2024-29843 High 7.5 Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration 0.5%
• CVE-2024-29842 High 7.5 Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values 0.5%
• CVE-2024-29841 High 7.5 Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys values 0.5%
• CVE-2024-29840 High 7.5 Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values 0.5%
• CVE-2024-29839 High 7.5 Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values. 0.5%
• CVE-2024-29838 High 7.5 Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash 0.5%
• CVE-2024-29837 High 8.8 Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections 0.5%
• CVE-2024-29836 Critical 9.8 Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover 0.6%