CVE-2024-58337
—CVSS 4.0
8.7 high
EPSS
<1%p15
Published
()
Modified
Description
Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.
- Vendors
- akuvox
- Products
- s539 firmware, s532 firmware, x916 firmware, x915 firmware, x912 firmware, r29 firmware, e16c firmware, r20k-2 firmware, r20a-2 firmware, c313w-2 firmware, ns-2 firmware, nc-2 firmware
- Weakness
- CWE-862
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news0 stories
No ingested article mentions this CVE yet.