← CVE Intelligence

CVE-2024-29840

Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values PUBLISHED

Description (CNA)

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin value of any user

Affected (CNA)

Vendor / productVersions
CS Technologies Australia / Evolution Controlleraffected 2.x

CWE

CWE-200, CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.