Skip to content
OpenAdvisories

Product · CS Technologies Australia

Evolution Controller

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-29844

    Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions

    Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There…

    CS Technologies Australia Evolution Controller
  • Critical 9.8
    CVE-2024-29836

    Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover

    The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the site.

    CS Technologies Australia Evolution Controller