CVE-2024-33895: Medium severity Hms-networks Ewon Cosy\+ Firmware vulnerability
Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-33895?
The severity of CVE-2024-33895 is classified as medium, due to the potential exposure of sensitive configuration parameters.
How do I fix CVE-2024-33895?
To fix CVE-2024-33895, update to firmware version 21.2s10 or 22.1s3 or later.
Which devices are affected by CVE-2024-33895?
CVE-2024-33895 affects Ewon Cosy+ devices running firmware versions below 21.2s10 and 22.1s3.
What vulnerability does CVE-2024-33895 address?
CVE-2024-33895 addresses the issue of using a non-unique key for encrypting configuration parameters, which could lead to unauthorized access.
Is there a need for immediate action regarding CVE-2024-33895?
Yes, immediate action is recommended to mitigate the risks associated with CVE-2024-33895 by upgrading the affected firmware.