{"id":"CVE-2024-29837","state":"PUBLISHED","title":"Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections","description":"The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in.","publishedAt":"2024-04-14T23:47:48.598Z","updatedAt":"2024-08-02T01:17:57.361Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"directcyber"},"assigner":"directcyber","products":["CS Technologies Australia Evolution Controller"],"affected":[{"vendor":"CS Technologies Australia","product":"Evolution Controller","defaultStatus":"affected","versions":[{"version":"2.x","status":"affected"}]}],"references":["https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html"],"weaknesses":["CWE-284","CWE-1390"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/29xxx/CVE-2024-29837.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-29837","state":"PUBLISHED","datePublished":"2024-04-14T23:47:48.598Z","dateUpdated":"2024-08-02T01:17:57.361Z","assignerShortName":"directcyber","assignerOrgId":"430a6cef-dc26-47e3-9fa8-52fb7f19644e","dateReserved":"2024-03-21T00:52:45.514Z"},"containers":{"cna":{"title":"Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections","descriptions":[{"lang":"en","value":"The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in."}],"affected":[{"vendor":"CS Technologies Australia","product":"Evolution Controller","defaultStatus":"affected","versions":[{"version":"2.x","status":"affected"}]}],"references":[{"url":"https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-1390","description":"CWE-1390 Weak Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"directcyber","orgId":"430a6cef-dc26-47e3-9fa8-52fb7f19644e","dateUpdated":"2024-04-14T23:47:48.598Z"},"impacts":[{"capecId":"CAPEC-115","descriptions":[{"lang":"en","value":"CAPEC-115 Authentication Bypass"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"cs_technologies","product":"evolution_controller","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.04.560.31.03.2024","versionType":"custom"}],"cpes":["cpe:2.3:a:cs_technologies:evolution_controller:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-04-22T17:43:04.401110Z","id":"CVE-2024-29837","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-06T15:46:56.085Z"}},{"title":"CVE Program Container","references":[{"url":"https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T01:17:57.361Z"}}]}}}