CVE-2024-58337

Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

Affected

The Akuvox Company · Akuvox Smart Doorphone · Akuvox Smart Intercom

CVSS v4.0 VULNCHECK

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.24% chance of exploitation in the next 30 days, 15th percentile

Published

2025-12-30

Updated

2026-01-16

Proof-of-concept exploits (1)

• https://packetstormsecurity.com/files/182870/

Security advisories

• https://cxsecurity.com/issue/WLB-2024110042
• https://www.vulncheck.com/advisories/akuvox-smart-intercom-s-improper-access-control-via-…
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5862.php

References

• CVE Record
• NVD entry