CVE-2024-29842: Cs-Technologies Evolution

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS, allowing for an unauthenticated attacker to return the abacard field of any user

Affected products

• Cs-Technologies Evolution: up to and including 2.04.560

Published 2024-04-15. Last modified 2026-06-17.