Authenticated Remote Code Execution
CVE-2024-9154

Currently unrated

Key Information:

Vendor: Hms Networks
Status: Ewon Flexy 205
Vendor: CVE Published:; 19 December 2024

🔔 Create Hms Networks Vulnerability Alert

What is CVE-2024-9154?

A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).

Affected Version(s)

Ewon Flexy 205 0 <= 14.8s0 (#2633)

References

https://cyberdanube.com/security-research/authenticated-r...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 19, 2024

Credit

Thomas Fankhauser (CyberDanube)

CVE-2024-9154 Data

JSON