Improper Access Control in Akuvox S539 Enables Privilege Escalation

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: VulnCheck

Description

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-30

Last Modified

2025-12-30

Generated

2026-07-06

AI Q&A

2025-12-31

EPSS Evaluated

2026-07-05

NVD

CVE-2024-58337

Affected Vendors & Products

Vendor	Product	Version / Range
akuvox	smart_intercom	4.0
akuvox	smart_intercom	3.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability in Akuvox Smart Intercom S539 is an improper access control issue that allows users with 'User' privileges to modify API access settings and configurations. This means attackers can exploit it to escalate their privileges and gain unauthorized access to administrative functions.

Impact Analysis

The vulnerability can lead to unauthorized privilege escalation, allowing attackers to access and modify administrative functionalities. This can compromise the security and integrity of the device and potentially the network it is connected to.

Hi! I’m here to help you understand CVE-2024-58337. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70