CVE-2024-58337

published 2025-12-30

CVE-2024-58337: Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and…

Priority P4 25 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I L A N

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

Affected

24 ranges

Vendor	Product	Version range	Fixed in
akuvox	c313w-2_firmware	—	—
akuvox	e16c_firmware	—	—
akuvox	nc-2_firmware	—	—
akuvox	ns-2_firmware	—	—
akuvox	nx-2_firmware	—	—
akuvox	r20a-2_firmware	—	—
akuvox	r20k-2_firmware	—	—
akuvox	r29_firmware	—	—
akuvox	s532_firmware	—	—
akuvox	s539_firmware	—	—
akuvox	x912_firmware	—	—
akuvox	x915_firmware	—	—
akuvox	x916_firmware	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_doorphone	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—
the_akuvox_company	akuvox_smart_intercom	—	—

CVSS provenance

nvd v3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

nvd v4.0 8.7 HIGH CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-862