CVE-2025-0432: HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information
Published Jan 28, 2025
·Updated
EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.
Affected Software
2 affected components
: HMS Networks Ewon Flexy 202
HMS Networks EWON FLEXY 202
Event History
Jan 28, 2025
CVE Published
via MITRE·03:56 PM
Data Sourced
via MITRE·03:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-0432?
CVE-2025-0432 is considered a critical vulnerability due to the transmission of user credentials in clear text.
2
How do I fix CVE-2025-0432?
To mitigate CVE-2025-0432, ensure that secure protocols are implemented for credential transmission.
3
What product is affected by CVE-2025-0432?
CVE-2025-0432 affects the HMS Networks Ewon Flexy 202 device.
4
What consequences can arise from CVE-2025-0432?
The transmission of user credentials in clear text can lead to unauthorized access and potential data breaches.
5
When was CVE-2025-0432 published?
The details for CVE-2025-0432 were made public in 2025, highlighting a significant security concern.