CVE-2024-33895

2024-08-0218:16:18

CWE-798

[email protected]

web.nvd.nist.gov

cve-2024-33895

cosy+ devices

firmware encryption

CVSS3

6.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

20.4%

JSON

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device.

Affected configurations

Nvd

Node

hms-networksewon_cosy\+_firmwareRange21.0–21.2s10

hms-networksewon_cosy\+_firmwareRange22.0–22.1s3

AND

hms-networksewon_cosy\+_4g_apacMatch-

hms-networksewon_cosy\+_4g_euMatch-

hms-networksewon_cosy\+_4g_jpMatch-

hms-networksewon_cosy\+_4g_naMatch-

hms-networksewon_cosy\+_ethernetMatch-

hms-networksewon_cosy\+_wifiMatch-

VendorProductVersionCPE
hms-networksewon_cosy\+_firmware*cpe:2.3:o:hms-networks:ewon_cosy\+_firmware:*:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_apac-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_apac:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_eu-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_eu:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_jp-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_jp:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_4g_na-cpe:2.3:h:hms-networks:ewon_cosy\+_4g_na:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_ethernet-cpe:2.3:h:hms-networks:ewon_cosy\+_ethernet:-:*:*:*:*:*:*:*
hms-networksewon_cosy\+_wifi-cpe:2.3:h:hms-networks:ewon_cosy\+_wifi:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hms-networks	ewon_cosy\+_firmware	*	cpe:2.3:o:hms-networks:ewon_cosy\+_firmware::::::::
hms-networks	ewon_cosy\+_4g_apac	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_apac:-:::::::*
hms-networks	ewon_cosy\+_4g_eu	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_eu:-:::::::*
hms-networks	ewon_cosy\+_4g_jp	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_jp:-:::::::*
hms-networks	ewon_cosy\+_4g_na	-	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_na:-:::::::*
hms-networks	ewon_cosy\+_ethernet	-	cpe:2.3:h:hms-networks:ewon_cosy\+_ethernet:-:::::::*
hms-networks	ewon_cosy\+_wifi	-	cpe:2.3:h:hms-networks:ewon_cosy\+_wifi:-:::::::*

References

blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/

hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf

www.ewon.biz/products/cosy/ewon-cosy-wifi

www.hms-networks.com/cyber-security