HM
Vendor
Hms-networks
33
CVEs
0
On KEV
10
New 30D
Products
PW7.1
PCAN Windows CAN device drivers
HMS Networks
5 CVEs0 on KEV5 new
PD7.1
PEAK-System Device Driver Setup
HMS Networks
5 CVEs0 on KEV5 new
EC9.1
Ewon Cosy Firmware
Hms-networks
8 CVEs0 on KEV0 new
EC10.0
Ecatcher
Hms-networks
2 CVEs0 on KEV0 new
EF6.1
Ewon Flexy Firmware
Hms-networks
2 CVEs0 on KEV0 new
AC6.1
Anybus Compactcom 30 Module Ethernet/ip Firmware
Hms-networks
1 CVEs0 on KEV0 new
AC6.1
Anybus Compactcom 30 Module Usb Without Housing Firmware
Hms-networks
1 CVEs0 on KEV0 new
EF8.6
Ewon Flexy 205
HMS Networks
1 CVEs0 on KEV0 new
NE6.1
Netbiter Ec150 Firmware
Hms-networks
1 CVEs0 on KEV0 new
NE6.1
Netbiter Ec250 Firmware
Hms-networks
1 CVEs0 on KEV0 new
NL6.1
Netbiter Lc310 Firmware
Hms-networks
1 CVEs0 on KEV0 new
NL6.1
Netbiter Lc310 Thingworx Firmware
Hms-networks
1 CVEs0 on KEV0 new
NL6.1
Netbiter Lc350 Firmware
Hms-networks
1 CVEs0 on KEV0 new
NL6.1
Netbiter Lc350 Thingworx Firmware
Hms-networks
1 CVEs0 on KEV0 new
NW6.1
Netbiter Ws100 Firmware
Hms-networks
1 CVEs0 on KEV0 new
NW6.1
Netbiter Ws200 Firmware
Hms-networks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105960 | PD PEAK-System Device Driver Setup HMS Networks | 5.5 | Oct 20 | HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency |
| CVE-2026-110322 | PD PEAK-System Device Driver Setup HMS Networks | 5.5 | Oct 20 | HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference |
| CVE-2026-103672 | PW PCAN Windows CAN device drivers HMS Networks | 7.1 | Oct 20 | HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index |
| CVE-2026-101103 | PD PEAK-System Device Driver Setup HMS Networks | 5.5 | Oct 20 | HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow |
| CVE-2026-109576 | PW PCAN Windows CAN device drivers HMS Networks | 5.5 | Oct 20 | HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write |
| CVE-2024-9154 | EF Ewon Flexy 205 HMS Networks | 8.6 | Dec 19 | Authenticated Remote Code Execution |
| CVE-2024-33897 | EC Ewon Cosy+ Firmware Hms-networks | 9.1 | Aug 6 | A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue |
| CVE-2024-33896 | EC Ewon Cosy+ Firmware Hms-networks | 7.2 | Aug 2 | Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting |
| CVE-2024-33895 | EC Ewon Cosy+ Firmware Hms-networks | 6.6 | Aug 2 | Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters |
| CVE-2024-33894 | EC Ewon Cosy+ Firmware Hms-networks | 8.8 | Aug 2 | Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges |
| CVE-2024-33893 | EC Ewon Cosy+ Firmware Hms-networks | 6.1 | Aug 2 | Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization |
| CVE-2024-33892 | EC Ewon Cosy+ Firmware Hms-networks | 7.5 | Aug 2 | Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies |
| CVE-2024-6558 | AC Anybus Compactcom 30 Module Ethernet/ip Firmware Hms-networks | 6.1 | Jul 25 | HMS Industrial Networks Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of input sanitation checks |
| CVE-2021-33214 | EC Ecatcher Hms-networks | 6.1 | Jul 9 | In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of… |
| CVE-2020-16230 | EF Ewon Flexy Firmware Hms-networks | 2.3 | Sep 18 | All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains can request resources |
| CVE-2020-14498 | EC Ecatcher Hms-networks | 10.0 | Aug 26 | HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code |
| CVE-2020-10633 | EF Ewon Flexy Firmware Hms-networks | 6.1 | Apr 8 | A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0) |
| CVE-2018-19694 | NW Netbiter Ws100 Firmware Hms-networks | 6.1 | Mar 17 | HMS Industrial Networks Netbiter WS100 3.30.5 devices and previous have reflected XSS in the login form |