CVE-2024-33896: Code Injection
Published Aug 2, 2024
·Updated
Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s3.
Affected Software
8 affected components
All of the following
Any of the following
Hms-networks Ewon Cosy\+ Firmware>=21.0<=21.2s10
Hms-networks Ewon Cosy\+ Firmware>=22.0<=22.1s3
Any of the following
Hms-networks Ewon Cosy\+ 4g Apac
Hms-networks Ewon Cosy\+ 4g Eu
Hms-networks Ewon Cosy\+ 4g Jp
Hms-networks Ewon Cosy\+ 4g Na
Hms-networks Ewon Cosy\+ Ethernet
Hms-networks Ewon Cosy\+ Wifi
Event History
Aug 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Apr 10, 2025
Exploit Published
12:00 AM
Known Exploited
09:48 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-33896?
CVE-2024-33896 has a high severity due to its potential for code injection.
2
How do I fix CVE-2024-33896?
To fix CVE-2024-33896, update your Ewon Cosy+ devices to firmware version 21.2s10 or 22.1s3 or later.
3
Which devices are affected by CVE-2024-33896?
CVE-2024-33896 affects Ewon Cosy+ devices running firmware versions below 21.2s10 or 22.1s3.
4
What type of vulnerability is CVE-2024-33896?
CVE-2024-33896 is a code injection vulnerability caused by improper parameter blacklisting.
5
Is there a specific firmware version that is safe from CVE-2024-33896?
Yes, firmware versions 21.2s10 and 22.1s3 or higher are not vulnerable to CVE-2024-33896.