EC
Product
Ewon Cosy Firmware
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 1
Watch
Add Ewon Cosy Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33895 | 6.6 | Aug 2 | Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters Affected: 21.0 through 21.2s10; 22.0 through 22.1s3 |
| CVE-2024-33893 | 6.1 | Aug 2 | Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization Affected: 21.0 through 21.2s10; 22.0 through 22.1s3 |
| CVE-2020-10633 | 6.1 | Apr 8 | A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0) Affected: before 14.1s0 |
Showing 3