CVE-2024-33897: Critical severity hms-networks ewon cosy+ firmware vulnerability
Published Aug 6, 2024
·Updated
A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024.
Affected Software
8 affected components
All of the following
Any of the following
Hms-networks Ewon Cosy\+ Firmware>=21.0s0<21.2s10
Hms-networks Ewon Cosy\+ Firmware>=22.0s0<22.1s3
Any of the following
Hms-networks Ewon Cosy\+ 4g Apac
Hms-networks Ewon Cosy\+ 4g Eu
Hms-networks Ewon Cosy\+ 4g Jp
Hms-networks Ewon Cosy\+ 4g Na
Hms-networks Ewon Cosy\+ Ethernet
Hms-networks Ewon Cosy\+ Wifi
Event History
Aug 6, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-33897?
CVE-2024-33897 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2024-33897?
You can mitigate CVE-2024-33897 by updating your Hms-networks Ewon Cosy+ firmware to the latest version released after April 18, 2024.
3
What are the affected versions of the Hms-networks Ewon Cosy+ firmware related to CVE-2024-33897?
Affected versions include Ewon Cosy+ firmware version 21.0s0 to 21.2s10 and 22.0s0 to 22.1s3.
4
What is the impact of CVE-2024-33897?
CVE-2024-33897 could lead to an availability issue, as a compromised device can request a Certificate Signing Request for another device.
5
When was the patch for CVE-2024-33897 released?
The patch for CVE-2024-33897 was released on April 18, 2024.