cs-technologies kayıtları
cs-technologies üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor5
- CWE-284 Improper Access Control2
- CWE-1392 Use of Default Credentials1
- CWE-20 Improper Input Validation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-29844İstismar yok | Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functionscs-technologies · evolution · CWE-1392 | Kritik9,8 | — | %0,6 | 14 Nis 2024 |
39İzleyin | CVE-2024-29836İstismar yok | Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeovercs-technologies · evolution · CWE-284 | Kritik9,8 | — | %0,6 | 14 Nis 2024 |
35İzleyin | CVE-2024-29837İstismar yok | Poor session management in Evolution Controller allows administrator functionality for unauthenticated connectionscs-technologies · evolution · CWE-284 | Yüksek8,8 | — | %0,5 | 14 Nis 2024 |
30İzleyin | CVE-2024-29838İstismar yok | Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crashcs-technologies · evolution · CWE-20 | Yüksek7,5 | — | %0,5 | 14 Nis 2024 |
30İzleyin | CVE-2024-29840İstismar yok | Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field valuescs-technologies · evolution · CWE-200 | Yüksek7,5 | — | %0,5 | 14 Nis 2024 |
30İzleyin | CVE-2024-29842İstismar yok | Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD valuescs-technologies · evolution · CWE-200 | Yüksek7,5 | — | %0,5 | 14 Nis 2024 |
30İzleyin | CVE-2024-29843İstismar yok | Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumerationcs-technologies · evolution · CWE-200 | Yüksek7,5 | — | %0,5 | 14 Nis 2024 |
30İzleyin | CVE-2024-29841İstismar yok | Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys valuescs-technologies · evolution · CWE-200 | Yüksek7,5 | — | %0,5 | 14 Nis 2024 |
30İzleyin | CVE-2024-29839İstismar yok | Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values.cs-technologies · evolution · CWE-200 | Yüksek7,5 | — | %0,5 | 14 Nis 2024 |
- CVE-2024-2984439İzleyin
Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions
KritikCVSS 9,8İstismar yokEPSS %1cs-technologies · evolution14 Nis 2024
- CVE-2024-2983639İzleyin
Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover
KritikCVSS 9,8İstismar yokEPSS %1cs-technologies · evolution14 Nis 2024
- CVE-2024-2983735İzleyin
Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections
YüksekCVSS 8,8İstismar yokEPSS %1cs-technologies · evolution14 Nis 2024
- CVE-2024-2983830İzleyin
Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash
YüksekCVSS 7,5İstismar yokEPSS %1cs-technologies · evolution14 Nis 2024
- CVE-2024-2984030İzleyin
Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values
YüksekCVSS 7,5İstismar yokEPSS %0cs-technologies · evolution14 Nis 2024
- CVE-2024-2984230İzleyin
Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values
YüksekCVSS 7,5İstismar yokEPSS %0cs-technologies · evolution14 Nis 2024
- CVE-2024-2984330İzleyin
Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration
YüksekCVSS 7,5İstismar yokEPSS %0cs-technologies · evolution14 Nis 2024
- CVE-2024-2984130İzleyin
Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys values
YüksekCVSS 7,5İstismar yokEPSS %0cs-technologies · evolution14 Nis 2024
- CVE-2024-2983930İzleyin
Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values.
YüksekCVSS 7,5İstismar yokEPSS %0cs-technologies · evolution14 Nis 2024