CVE-2024-29838CWE-20CWE-457

Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash

High · published April 14, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker to crash the controller software

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00538 · 44.5th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-457 · Use of Uninitialized Variable
Published
2024-04-14T23:47Z
EPSS history
Timeline
  • 14 APR 23:47Z
    Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash
    cvelistv5