medium4.3
CVE-2024-58337
Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configu…
Impact
Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Akuvox | S539 Firmware | Version 912.30.1.137 |
| Akuvox | S532 Firmware | Version 912.30.1.137 |
| Akuvox | X916 Firmware | Version 912.30.1.137 |
| Akuvox | X915 Firmware | Version 912.30.1.137 |
| Akuvox | X912 Firmware | Version 912.30.1.137 |
| Akuvox | R29 Firmware | Version 912.30.1.137 |
| Akuvox | E16c Firmware | Version 912.30.1.137 |
| Akuvox | R20k-2 Firmware | Version 912.30.1.137 |
| Akuvox | R20a-2 Firmware | Version 912.30.1.137 |
| Akuvox | C313w-2 Firmware | Version 912.30.1.137 |
| Akuvox | Ns-2 Firmware | Version 912.30.1.137 |
| Akuvox | Nc-2 Firmware | Version 912.30.1.137 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cxsecurity.com/issue/WLB-2024110042
- https://packetstormsecurity.com/files/182870/
- https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-improper-access-control-via-serviceshttpapi
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php