CVE-2024-29843: Cs-Technologies Evolution

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing for an unauthenticated attacker to enumerate all users and their access levels

Affected products

• Cs-Technologies Evolution: up to and including 2.04.560

Published 2024-04-15. Last modified 2026-06-17.