← Back

CVE-2024-29844

nvd nist
Published: Apr 15, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e (Secondary)

Description

Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.

Affected (1)

Cs Technologies
1 product
Evolution
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Evolution
Up to 2.04.560

Related CWEs

CWE-1392
Use of Default Credentials
The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

References (2)

Source: 430a6cef-dc26-47e3-9fa8-52fb7f19644e
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.