Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| The Akuvox Company | Akuvox Smart Doorphone | affected |
|
|||||||||||||||||||||
| The Akuvox Company | Akuvox Smart Intercom | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
No data.
| Vendor | Product | Versions |
|---|---|---|
| Akuvox | Smart Doorphone | — |
| Akuvox | Smart Intercom | — |
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.244% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Akuvox c313w-2
Akuvox c313w-2 Firmware Akuvox e16c Akuvox e16c Firmware Akuvox nc-2 Akuvox nc-2 Firmware Akuvox ns-2 Akuvox ns-2 Firmware Akuvox nx-2 Akuvox nx-2 Firmware Akuvox r20a-2 Akuvox r20a-2 Firmware Akuvox r20k-2 Akuvox r20k-2 Firmware Akuvox r29 Akuvox r29 Firmware Akuvox s532 Akuvox s532 Firmware Akuvox s539 Akuvox s539 Firmware Akuvox x912 Akuvox x912 Firmware Akuvox x915 Akuvox x915 Firmware Akuvox x916 Akuvox x916 Firmware |
|
| CPEs | cpe:2.3:h:akuvox:c313w-2:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:e16c:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:nc-2:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:ns-2:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:nx-2:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:r20a-2:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:r20k-2:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:r29:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:s532:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:s539:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:x912:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:x915:-:*:*:*:*:*:*:* cpe:2.3:h:akuvox:x916:-:*:*:*:*:*:*:* cpe:2.3:o:akuvox:c313w-2_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:e16c_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:nc-2_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:ns-2_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:nx-2_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:r20a-2_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:r20k-2_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:r29_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:s532_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:s539_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:x912_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:x915_firmware:912.30.1.137:*:*:*:*:*:*:* cpe:2.3:o:akuvox:x916_firmware:912.30.1.137:*:*:*:*:*:*:* |
|
| Vendors & Products |
Akuvox c313w-2
Akuvox c313w-2 Firmware Akuvox e16c Akuvox e16c Firmware Akuvox nc-2 Akuvox nc-2 Firmware Akuvox ns-2 Akuvox ns-2 Firmware Akuvox nx-2 Akuvox nx-2 Firmware Akuvox r20a-2 Akuvox r20a-2 Firmware Akuvox r20k-2 Akuvox r20k-2 Firmware Akuvox r29 Akuvox r29 Firmware Akuvox s532 Akuvox s532 Firmware Akuvox s539 Akuvox s539 Firmware Akuvox x912 Akuvox x912 Firmware Akuvox x915 Akuvox x915 Firmware Akuvox x916 Akuvox x916 Firmware |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Akuvox
Akuvox smart Doorphone Akuvox smart Intercom |
|
| Vendors & Products |
Akuvox
Akuvox smart Doorphone Akuvox smart Intercom |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities. | |
| Title | Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI | |
| Weaknesses | CWE-862 | |
| References |
| |
| Metrics |
cvssV3_1
|