Approved changes feed: RSS · Atom

cpe:2.3:a:biamp:evoko_home_service:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBiamp (cb5fd21a-8fda-571d-a6e3-9c0c540a993f)
ProductEvoko Home Service (e49eb386-1cc8-5338-8ef8-5b807ea52b14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12903 vulnerable 2026-06-08 06:25:36.311383 Incorrect default permissions in Biamp Evoko Home
HIGH (7.8)
Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised machine. It has been identified that full control permissions exist on the ‘Everyone’ group (i.e. any user who has local access to the operating system regardless of their privileges).
Published: 2024-12-23T12:41:12.704Z
Updated: 2024-12-24T01:59:35.383Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.