Ewon Cosy Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

EC

Product

Ewon Cosy Firmware

by Hms-networks · last CVE Aug 6, 2024

8

CVEs

0

On KEV

9.1

Max CVSS

0

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 1High 3Medium 3Low 1

Severity

All severities8 Critical1 High3 Medium3 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ewon Cosy Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-33894	8.8	1%	Aug 2	Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges Affected: 21.0s0 before 21.2s10; 22.0s0 before 22.1s3
CVE-2024-33892	7.5	0%	Aug 2	Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies Affected: 21.0s0 before 21.2s10; 22.0s0 before 22.1s3
CVE-2024-33896	7.2	4%	Aug 2	Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting Affected: 21.0 through 21.2s10; 22.0 through 22.1s3