CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-29836
Severity
CRITICAL
CVSS
9.8
EPSS
0.58%
Original NVD Description
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the site.
Related CVEs
Other vulnerabilities affecting the same vendor(s)