NA

CVE-2024-29840

Published: 15/04/2024 Updated: 15/04/2024

Vulnerability Summary

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated malicious user to return the pin value of any user