CVE-2024-33893

2024-08-0218:16:18

CWE-79

[email protected]

web.nvd.nist.gov

cve-2024-33893

xss

input sanitization

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

37.1%

JSON

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization. This is fixed in version 21.2s10 and 22.1s3.

Affected configurations

Nvd

Node

hms-networksewon_cosy\+_firmwareRange21.0–21.2s10

hms-networksewon_cosy\+_firmwareRange22.0–22.1s3

AND

hms-networksewon_cosy\+_4g_apacMatch-

hms-networksewon_cosy\+_4g_euMatch-

hms-networksewon_cosy\+_4g_jpMatch-

hms-networksewon_cosy\+_4g_naMatch-

hms-networksewon_cosy\+_ethernetMatch-

hms-networksewon_cosy\+_wifiMatch-

VendorProductVersionCPE
hms-networksewon_cosy\+_firmware*cpe:2.3:o:hms-networks:ewon_cosy\+_firmware:*:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_apac-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_apac:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_eu-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_eu:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_jp-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_jp:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_na-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_na:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_ethernet-cpe:2.3:h:hms-networks:ewon_cosy\+_ethernet:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_wifi-cpe:2.3:h:hms-networks:ewon_cosy\+_wifi:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hms-networks	ewon_cosy\+_firmware	*	cpe:2.3:o:hms-networks:ewon_cosy\+_firmware::::::::
hms-networks	ewon_cosy\+_4g_apac	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_apac:-:::::::*
hms-networks	ewon_cosy\+_4g_eu	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_eu:-:::::::*
hms-networks	ewon_cosy\+_4g_jp	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_jp:-:::::::*
hms-networks	ewon_cosy\+_4g_na	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_na:-:::::::*
hms-networks	ewon_cosy\+_ethernet	-	cpe:2.3:h:hms-networks:ewon_cosy\+_ethernet:-:::::::*
hms-networks	ewon_cosy\+_wifi	-	cpe:2.3:h:hms-networks:ewon_cosy\+_wifi:-:::::::*

References

blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/

hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf

www.ewon.biz/products/cosy/ewon-cosy-wifi

www.hms-networks.com/cyber-security