CVE-2024-58337

🗓️ 30 Dec 2025 23:15:49Reported by [email protected]Type

Akuvox S539 has improper access control letting users modify API settings and gain admin access.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-58337	31 Dec 202517:06	–	circl
CNNVD	Akuvox S539 安全漏洞	30 Dec 202500:00	–	cnnvd
CVE	CVE-2024-58337	30 Dec 202522:41	–	cve
Cvelist	CVE-2024-58337 Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI	30 Dec 202522:41	–	cvelist
EUVD	EUVD-2024-55371	31 Dec 202500:31	–	euvd
OSV	CVE-2024-58337	30 Dec 202523:15	–	osv
Positive Technologies	PT-2025-54257	30 Dec 202500:00	–	ptsecurity
Vulnrichment	CVE-2024-58337 Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI	30 Dec 202522:41	–	vulnrichment
Zero Science Lab	Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control	26 Nov 202400:00	–	zeroscience

NVD

Node

akuvox s539_firmwareMatch912.30.1.137

AND

akuvox s539Match-

Node

akuvox s532_firmwareMatch912.30.1.137

AND

akuvox s532Match-

Node

akuvox x916_firmwareMatch912.30.1.137

AND

akuvox x916Match-

Node

akuvox x915_firmwareMatch912.30.1.137

AND

akuvox x915Match-

Node

akuvox x912_firmwareMatch912.30.1.137

AND

akuvox x912Match-

Node

akuvox r29_firmwareMatch912.30.1.137

AND

akuvox r29Match-

Node

akuvox e16c_firmwareMatch912.30.1.137

AND

akuvox e16cMatch-

Node

akuvox r20k-2_firmwareMatch912.30.1.137

AND

akuvox r20k-2Match-

Node

akuvox r20a-2_firmwareMatch912.30.1.137

AND

akuvox r20a-2Match-

Node

akuvox c313w-2_firmwareMatch912.30.1.137

AND

akuvox c313w-2Match-

Node

akuvox ns-2_firmwareMatch912.30.1.137

AND

akuvox ns-2Match-

Node

akuvox nc-2_firmwareMatch912.30.1.137

AND

akuvox nc-2Match-

Node

akuvox nx-2_firmwareMatch912.30.1.137

AND

akuvox nx-2Match-

Source	Link
zeroscience	www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php
packetstormsecurity	www.packetstormsecurity.com/files/182870/
cxsecurity	www.cxsecurity.com/issue/WLB-2024110042
vulncheck	www.vulncheck.com/advisories/akuvox-smart-intercom-s-improper-access-control-via-serviceshttpapi

16 Jan 2026 19:16Current

CVSS 3.14.3

CVSS 48.7

EPSS0.00045

CWE-862