CVE-2024-33897

Published: Aug 6, 2024Modified: Nov 21, 2024

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024.

Affected (2)

Products: Hms Networks: Ewon Cosy+ Firmware

Hms Networks

1 product

Ewon Cosy+ Firmware

Configuration A

2 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Hms Networks Ewon Cosy+ Firmware	From 21.0s0 to 21.2s10
Hms Networks Ewon Cosy+ Firmware	From 22.0s0 to 22.1s3

Running on/with	Platform Versions
Hms Networks Ewon Cosy+ 4g Apac	All versions
Hms Networks Ewon Cosy+ 4g Eu	All versions
Hms Networks Ewon Cosy+ 4g Jp	All versions
Hms Networks Ewon Cosy+ 4g Na	All versions
Hms Networks Ewon Cosy+ Ethernet	All versions
Hms Networks Ewon Cosy+ Wifi	All versions