CVE-2024-7755: HMS Networks EWON FLEXY 202 Insufficiently Protected Credentials
Published Oct 17, 2024
·Updated
The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials.
Affected Software
1 affected component
HMS Networks EWON FLEXY 202
Remediation
Information
HMS Networks recommends users update to firmware version 14.9s2 https://www.hms-networks.com/p/flexy20200-00ma-ewon-flexy-202 .
Event History
Oct 17, 2024
CVE Published
via MITRE·06:13 PM
Data Sourced
via MITRE·06:13 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-7755?
The severity of CVE-2024-7755 is considered high due to the potential exposure of sensitive credentials.
2
How do I fix CVE-2024-7755?
To fix CVE-2024-7755, it's recommended to implement stronger encryption methods for credential transmission.
3
What vulnerabilities does CVE-2024-7755 exploit?
CVE-2024-7755 exploits the weak encoding method base64 used in transmitting credentials.
4
Who is affected by CVE-2024-7755?
CVE-2024-7755 affects devices using HMS Networks EWON FLEXY 202, which transmit credentials insecurely.
5
Can CVE-2024-7755 lead to unauthorized access?
Yes, CVE-2024-7755 can lead to unauthorized access as attackers can sniff and decode transmitted credentials.