agentprime: cs-technologies-australia-evolution-controllerEvery new CVE for cs-technologies-australia-evolution-controller.https://agentprime.io/CVE-2024-29844: Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functionshttps://agentprime.io/advisories/CVE-2024-29844/https://agentprime.io/advisories/CVE-2024-29844/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:48:26 GMTCVEcriticalCVE-2024-29843: Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumerationhttps://agentprime.io/advisories/CVE-2024-29843/https://agentprime.io/advisories/CVE-2024-29843/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:48:21 GMTCVECVE-2024-29842: Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD valueshttps://agentprime.io/advisories/CVE-2024-29842/https://agentprime.io/advisories/CVE-2024-29842/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:48:17 GMTCVECVE-2024-29841: Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys valueshttps://agentprime.io/advisories/CVE-2024-29841/https://agentprime.io/advisories/CVE-2024-29841/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:48:12 GMTCVECVE-2024-29840: Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field valueshttps://agentprime.io/advisories/CVE-2024-29840/https://agentprime.io/advisories/CVE-2024-29840/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:48:05 GMTCVECVE-2024-29839: Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values.https://agentprime.io/advisories/CVE-2024-29839/https://agentprime.io/advisories/CVE-2024-29839/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:48:00 GMTCVECVE-2024-29838: Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crashhttps://agentprime.io/advisories/CVE-2024-29838/https://agentprime.io/advisories/CVE-2024-29838/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:47:53 GMTCVECVE-2024-29837: Poor session management in Evolution Controller allows administrator functionality for unauthenticated connectionshttps://agentprime.io/advisories/CVE-2024-29837/https://agentprime.io/advisories/CVE-2024-29837/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:47:48 GMTCVECVE-2024-29836: Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeoverhttps://agentprime.io/advisories/CVE-2024-29836/https://agentprime.io/advisories/CVE-2024-29836/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 14 Apr 2024 23:47:13 GMTCVEcritical