CVE-2024-58337

Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI

State: Published
Severity: 8.7 High
Published: Dec 30, 2025
Updated: Jan 16, 2026
Reserved: Dec 26, 2025

Description

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulnCheck
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	VulnCheck

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
Akuvox Smart DoorphoneThe Akuvox Company	S539Affected S532Affected X916Affected X915Affected X912Affected
Akuvox Smart IntercomThe Akuvox Company	R20K-2Affected R20A-2Affected C313W-2Affected NS-2Affected NC-2Affected NX-2Affected

References

Zero Science Lab Disclosure (ZSL-2024-5862)third-party-advisory
Packet Storm Security Exploit Entryexploit
CXSecurity Vulnerability Listingthird-party-advisory
VulnCheck Advisory: Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPIthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.