Cs Technologies Australia Evolution Controller vulnerabilities

• cs technologies australia evolution controller, cs-technologies evolution +1 more Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions CVE-2024-29844 9.8 CriticalApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration CVE-2024-29843 7.5 HighApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values CVE-2024-29842 7.5 HighApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys values CVE-2024-29841 7.5 HighApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values CVE-2024-29840 7.5 HighApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values. CVE-2024-29839 7.5 HighApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash CVE-2024-29838 7.5 HighApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections CVE-2024-29837 8.8 HighApril 14, 2024
• cs technologies australia evolution controller, cs-technologies evolution +1 more Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover CVE-2024-29836 9.8 CriticalApril 14, 2024