Lucene search
PRIOn knowledge basePRION:CVE-2020-10633HistoryApr 08, 2020 - 1:15 a.m.
Cross site scripting
2020-04-0801:15:00
PRIOn knowledge base
www.prio-n.com
1
A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0). An attacker could send a specially crafted URL to initiate a password change for the device. The target must introduce the credentials to the gateway before the attack can be successful.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ewon_cosy_firmware | eq | < 14.1s0 | |
| ewon_flexy_firmware | eq | < 14.1s0 |
Related
cve
cve
CVE-2020-10633
2020-04-08 01:15:11
ics
ics
HMS Networks eWON Flexy and Cosy
2020-04-07 12:00:00
cvelist
cvelist
CVE-2020-10633
2020-04-08 00:03:25
nvd
nvd
CVE-2020-10633
2020-04-08 01:15:11