CVE-2024-58337

🗓️ 30 Dec 2025 22:41:44Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 9 Views

CVE-2024-58337: Akuvox S539 Intercom has improper access control enabling users to modify settings and gain admin rights.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-58337	31 Dec 202517:06	–	circl
CNNVD	Akuvox S539 安全漏洞	30 Dec 202500:00	–	cnnvd
Cvelist	CVE-2024-58337 Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI	30 Dec 202522:41	–	cvelist
EUVD	EUVD-2024-55371	31 Dec 202500:31	–	euvd
NVD	CVE-2024-58337	30 Dec 202523:15	–	nvd
OSV	CVE-2024-58337	30 Dec 202523:15	–	osv
Positive Technologies	PT-2025-54257	30 Dec 202500:00	–	ptsecurity
Vulnrichment	CVE-2024-58337 Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI	30 Dec 202522:41	–	vulnrichment
Zero Science Lab	Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control	26 Nov 202400:00	–	zeroscience

NVD

Vulners

Node

akuvox s539_firmwareMatch912.30.1.137

AND

akuvox s539Match-

Node

akuvox s532_firmwareMatch912.30.1.137

AND

akuvox s532Match-

Node

akuvox x916_firmwareMatch912.30.1.137

AND

akuvox x916Match-

Node

akuvox x915_firmwareMatch912.30.1.137

AND

akuvox x915Match-

Node

akuvox x912_firmwareMatch912.30.1.137

AND

akuvox x912Match-

Node

akuvox r29_firmwareMatch912.30.1.137

AND

akuvox r29Match-

Node

akuvox e16c_firmwareMatch912.30.1.137

AND

akuvox e16cMatch-

Node

akuvox r20k-2_firmwareMatch912.30.1.137

AND

akuvox r20k-2Match-

Node

akuvox r20a-2_firmwareMatch912.30.1.137

AND

akuvox r20a-2Match-

Node

akuvox c313w-2_firmwareMatch912.30.1.137

AND

akuvox c313w-2Match-

Node

akuvox ns-2_firmwareMatch912.30.1.137

AND

akuvox ns-2Match-

Node

akuvox nc-2_firmwareMatch912.30.1.137

AND

akuvox nc-2Match-

Node

akuvox nx-2_firmwareMatch912.30.1.137

AND

akuvox nx-2Match-

[
  {
    "vendor": "The Akuvox Company",
    "product": "Akuvox Smart Doorphone",
    "versions": [
      {
        "version": "S539",
        "status": "affected"
      },
      {
        "version": "S532",
        "status": "affected"
      },
      {
        "version": "X916",
        "status": "affected"
      },
      {
        "version": "X915",
        "status": "affected"
      },
      {
        "version": "X912",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "The Akuvox Company",
    "product": "Akuvox Smart Intercom",
    "versions": [
      {
        "version": "R20K-2",
        "status": "affected"
      },
      {
        "version": "R20A-2",
        "status": "affected"
      },
      {
        "version": "C313W-2",
        "status": "affected"
      },
      {
        "version": "NS-2",
        "status": "affected"
      },
      {
        "version": "NC-2",
        "status": "affected"
      },
      {
        "version": "NX-2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
cxsecurity	www.cxsecurity.com/issue/WLB-2024110042
vulncheck	www.vulncheck.com/advisories/akuvox-smart-intercom-s-improper-access-control-via-serviceshttpapi
packetstormsecurity	www.packetstormsecurity.com/files/182870/
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php

16 Jan 2026 19:16Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.14.3

CVSS 48.7

EPSS0.00035

SSVC

CWE-862