Description (CNA)
Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Akuvox Company / Akuvox Smart Doorphone | affected S539; affected S532; affected X916; affected X915; affected X912 |
| The Akuvox Company / Akuvox Smart Intercom | affected R20K-2; affected R20A-2; affected C313W-2; affected NS-2; affected NC-2; affected NX-2 |
CWE
CWE-862
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php
- https://packetstormsecurity.com/files/182870/
- https://cxsecurity.com/issue/WLB-2024110042
- https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-improper-access-control-via-serviceshttpapi
ADP enrichment
No English description supplied.