CVE-2024-58337 | THREATINT

Description

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

PUBLISHED Reserved 2025-12-26 | Published 2025-12-30 | Updated 2025-12-30 | Assigner VulnCheck

HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

Missing Authorization

Product status

S539

affected

S532

affected

X916

affected

X915

affected

X912

affected

R20K-2

affected

R20A-2

affected

C313W-2

affected

NS-2

affected

NC-2

affected

NX-2

affected

Credits

LiquidWorm as Gjoko Krstic of Zero Science Lab finder

References

www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php (Zero Science Lab Disclosure (ZSL-2024-5862)) third-party-advisory

packetstormsecurity.com/files/182870/ (Packet Storm Security Exploit Entry) exploit

cxsecurity.com/issue/WLB-2024110042 (CXSecurity Vulnerability Listing) third-party-advisory

www.vulncheck.com/...oper-access-control-via-serviceshttpapi (VulnCheck Advisory: Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI) third-party-advisory

cve.org (CVE-2024-58337)

nvd.nist.gov (CVE-2024-58337)

Download JSON