CVE-2024-29838

High

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an…

directcyber·CWE-457·Published 2024-04-14

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

192 chars

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker to crash the controller software

NVDen

192 chars

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker to crash the controller software

La interfaz web de las versiones 2.04.560.31.03.2024 y anteriores de Evolution Controller no sanitiza adecuadamente la entrada del usuario, lo que permite que un atacante no autenticado bloquee el software del controlador.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H