CVE-2024-33892: High severity Hms-networks Ewon Cosy\+ Firmware vulnerability
Published Aug 2, 2024
·Updated
Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in version 21.2s10 and 22.1s3
Affected Software
8 affected components
All of the following
Any of the following
Hms-networks Ewon Cosy\+ Firmware>=21.0s0<21.2s10
Hms-networks Ewon Cosy\+ Firmware>=22.0s0<22.1s3
Any of the following
Hms-networks Ewon Cosy\+ 4g Apac
Hms-networks Ewon Cosy\+ 4g Eu
Hms-networks Ewon Cosy\+ 4g Jp
Hms-networks Ewon Cosy\+ 4g Na
Hms-networks Ewon Cosy\+ Ethernet
Hms-networks Ewon Cosy\+ Wifi
Event History
Aug 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-33892?
CVE-2024-33892 is categorized as a moderate severity vulnerability due to its potential to leak sensitive information.
2
How do I fix CVE-2024-33892?
To fix CVE-2024-33892, upgrade the Ewon Cosy+ firmware to version 21.2s10 or 22.1s3 or later.
3
What systems are affected by CVE-2024-33892?
CVE-2024-33892 affects Ewon Cosy+ devices running firmware versions below 21.2s10 and 22.1s3.
4
What kind of information is leaked due to CVE-2024-33892?
CVE-2024-33892 can lead to the leakage of sensitive information through cookies stored in the device.
5
Is CVE-2024-33892 present in all Ewon Cosy+ devices?
No, CVE-2024-33892 specifically affects Ewon Cosy+ devices running vulnerable firmware versions, not all devices.