CVE-2024-29842

The CVE-2024-29842 entry refers to Evolution Controller Web interface, affected in versions 2.04.560.31.03.2024 and earlier. The root cause is poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS, enabling an unauthenticated attacker to retrieve the abacard field of any user. ...

DirectCyber Evolution Controller 安全漏洞

DirectCyber Evolution Controller is an access control controller software from DirectCyber, Inc. that is used to controller physical access to facilities. A security vulnerability exists in DirectCyber Evolution Controller version 2.04.560.31.03.2024 and prior versions, which stems from an...