CVE-2024-29843: The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing…

PriorityP348high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

0.50%

38.9th percentile

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing for an unauthenticated attacker to enumerate all users and their access levels

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cs-technologies	evolution	<= 2.04.560	—
cs_technologies_australia	evolution_controller	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.