Evolution Controller
Approved changes feed: RSS · Atom
cpe:2.3:a:cs_technologies:evolution_controller:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cs Technologies (765b1a85-06b2-53c8-9d68-656bd3d0a1c7) |
|---|---|
| Product | Evolution Controller (bb5bb6c1-d1b1-5489-bdb1-a603b7e5c4f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-29844 |
vulnerable | 2026-06-08 06:33:29.430292 |
Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions
CRITICAL (9.8)
Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.
Published: 2024-04-14T23:48:26.802Z
Updated: 2024-09-25T22:37:13.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29843 |
vulnerable | 2026-06-08 06:33:29.429908 |
Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration
HIGH (7.5)
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing for an unauthenticated attacker to enumerate all users and their access levels
Published: 2024-04-14T23:48:21.656Z
Updated: 2024-08-02T01:17:57.993Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29842 |
vulnerable | 2026-06-08 06:33:29.429395 |
Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values
HIGH (7.5)
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS, allowing for an unauthenticated attacker to return the abacard field of any user
Published: 2024-04-14T23:48:17.195Z
Updated: 2024-08-02T01:17:57.926Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29841 |
vulnerable | 2026-06-08 06:33:29.429043 |
Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys values
HIGH (7.5)
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS, allowing for an unauthenticated attacker to return the keys value of any user
Published: 2024-04-14T23:48:12.171Z
Updated: 2024-08-02T01:17:58.164Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29840 |
vulnerable | 2026-06-08 06:33:29.428611 |
Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values
HIGH (7.5)
The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin value of any user
Published: 2024-04-14T23:48:05.450Z
Updated: 2024-08-02T01:17:58.069Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29839 |
vulnerable | 2026-06-08 06:33:29.428199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29838 |
vulnerable | 2026-06-08 06:33:29.427604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29837 |
vulnerable | 2026-06-08 06:33:29.427207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29836 |
vulnerable | 2026-06-08 06:33:29.425473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.