CVE-2024-58337

HIGH EPSS 11.2%
Published Dec 30, 20256mo ago · Modified Jun 17, 20262w ago
8.7 CVSS 4.0
High
Find Similar
Published Dec 30, 2025 6mo ago
Last Modified Jun 17, 2026 2w ago

Description

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

CVSS Details

Base Score
8.7
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
11.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-862 Missing Authorization Authorization

Affected Products 26

VendorProductVersionRange
akuvoxs539_firmware912.30.1.137any
akuvoxs539*any
akuvoxs532_firmware912.30.1.137any
akuvoxs532*any
akuvoxx916_firmware912.30.1.137any
akuvoxx916*any
akuvoxx915_firmware912.30.1.137any
akuvoxx915*any
akuvoxx912_firmware912.30.1.137any
akuvoxx912*any
akuvoxr29_firmware912.30.1.137any
akuvoxr29*any
akuvoxe16c_firmware912.30.1.137any
akuvoxe16c*any
akuvoxr20k-2_firmware912.30.1.137any
akuvoxr20k-2*any
akuvoxr20a-2_firmware912.30.1.137any
akuvoxr20a-2*any
akuvoxc313w-2_firmware912.30.1.137any
akuvoxc313w-2*any
akuvoxns-2_firmware912.30.1.137any
akuvoxns-2*any
akuvoxnc-2_firmware912.30.1.137any
akuvoxnc-2*any
akuvoxnx-2_firmware912.30.1.137any
akuvoxnx-2*any

References 4

  • cxsecurity.com https://cxsecurity.com/issue/WLB-2024110042
    Third Party Advisory
  • packetstormsecurity.com https://packetstormsecurity.com/files/182870/
    Broken Link
  • vulncheck.com https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-improper-access-control-via-serviceshttpapi
    Third Party Advisory
  • zeroscience.mk https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php
    Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.