The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the site.
References
| Link | Resource |
|---|---|
| https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html | Third Party Advisory |
| https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html | Third Party Advisory |
Configurations
History
10 Dec 2025, 17:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other | |
| References | () https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html - Third Party Advisory | |
| First Time |
Cs-technologies evolution
Cs-technologies |
|
| CPE | cpe:2.3:a:cs-technologies:evolution:*:*:*:*:*:*:*:* |
21 Nov 2024, 09:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html - |
15 Apr 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-15 00:15
Updated : 2025-12-10 17:36
NVD link : CVE-2024-29836
Mitre link : CVE-2024-29836
CVE.ORG link : CVE-2024-29836
JSON object : View
Products Affected
cs-technologies
- evolution
CWE