CVE-2024-9154: Authenticated Remote Code Execution
Published Dec 19, 2024
·Updated
A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).
Affected Software
1 affected component
HMS Networks Ewon Flexy 205<=14.8s0
Event History
Dec 19, 2024
CVE Published
via MITRE·03:59 PM
Data Sourced
via MITRE·03:59 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-9154?
CVE-2024-9154 is rated as critical due to its potential to allow command execution at the system level on the affected device.
2
How do I fix CVE-2024-9154?
To mitigate CVE-2024-9154, update the Ewon Flexy 205 to a version later than 14.8s0.
3
Which devices are affected by CVE-2024-9154?
CVE-2024-9154 specifically affects the Ewon Flexy 205 up to and including version 14.8s0.
4
What kind of attacks can exploit CVE-2024-9154?
CVE-2024-9154 can be exploited by attackers to execute arbitrary commands remotely on the Ewon Flexy 205 device.
5
Is there a workaround for CVE-2024-9154?
Currently, the only effective workaround for CVE-2024-9154 is to immediately update to a patched version of the device firmware.