Remote Access Vulnerability in HMS Networks Cosy+ Devices
CVE-2024-33897

9.1CRITICAL

Key Information:

Vendor

Hms-networks

Status
Ewon Cosy\+ Firmware
Vendor
CVE Published:
6 August 2024

What is CVE-2024-33897?

The vulnerability associated with HMS Networks Cosy+ devices allows a compromised device to illicitly request a Certificate Signing Request from Talk2m for another device. This situation can lead to significant availability disruptions. The flaw underscores the importance of securing industrial remote access gateways. HMS Networks addressed this concern with a patch implemented on the Talk2m production server on April 18, 2024. Organizations utilizing these affected products should ensure that they are updated to maintain their cybersecurity posture.

References

https://www.ewon.biz/products/cosy/ewon-cosy-wifi
https://www.hms-networks.com/cyber-security
https://hmsnetworks.blob.core.windows.net/nlw/docs/defaul...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.