Advisories · Technology
CS Technologies Australia Evolution Controller.
Every CVE that names CS Technologies Australia Evolution Controller among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions
- CS Technologies Australia Evolution Controller
- CWE-1392
- CVSS 7.5 High
Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration
- CS Technologies Australia Evolution Controller
- Information disclosure
- Broken access control
- CVSS 7.5 High
Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values
- CS Technologies Australia Evolution Controller
- Information disclosure
- Broken access control
- CVSS 7.5 High
Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys values
- CS Technologies Australia Evolution Controller
- Information disclosure
- Broken access control
- CVSS 7.5 High
Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values
- CS Technologies Australia Evolution Controller
- Information disclosure
- Broken access control
- CVSS 7.5 High
Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values.
- CS Technologies Australia Evolution Controller
- Information disclosure
- Broken access control
- CVSS 7.5 High
Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash
- CS Technologies Australia Evolution Controller
- Memory corruption
- CWE-20
- CVSS 8.8 High
Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections
- CS Technologies Australia Evolution Controller
- Broken access control
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover
- CS Technologies Australia Evolution Controller
- Broken access control