High severity7.5NVD Advisory· Published Apr 15, 2024· Updated Jun 17, 2026

CVE-2024-29840

Description

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin value of any user

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Evolution Controller/Evolution Controllerllm-fuzzy
Range: <=2.04.560.31.03.2024
CS Technologies Australia/Evolution Controllerv5
Range: 2.x

Patches

Vulnerability mechanics

References

directcyber.com.au/sa/CVE-2024-29836-to-29844-evolution-controller-multiple-vulnerabilities.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000