The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in.
References
| Link | Resource |
|---|---|
| https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html | Third Party Advisory |
| https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html | Third Party Advisory |
Configurations
History
10 Dec 2025, 17:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cs-technologies:evolution:*:*:*:*:*:*:*:* | |
| First Time |
Cs-technologies evolution
Cs-technologies |
|
| References | () https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html - Third Party Advisory | |
| CWE | CWE-287 |
21 Nov 2024, 09:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.html - |
15 Apr 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-15 00:15
Updated : 2025-12-10 17:37
NVD link : CVE-2024-29837
Mitre link : CVE-2024-29837
CVE.ORG link : CVE-2024-29837
JSON object : View
Products Affected
cs-technologies
- evolution