CVE-2024-33893

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization. This is fixed in version 21.2s10 and 22.1s3.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/	Exploit Third Party Advisory
https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf	Vendor Advisory
https://www.ewon.biz/products/cosy/ewon-cosy-wifi	Product
https://www.hms-networks.com/cyber-security	VDB Entry Vendor Advisory
http://seclists.org/fulldisclosure/2024/Aug/19

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:hms-networks:ewon_cosy\+_firmware::::::::
	cpe:2.3:o:hms-networks:ewon_cosy\+_firmware::::::::

OR	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_apac:-:::::::*
	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_eu:-:::::::*
	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_jp:-:::::::*
	cpe:2.3:h:hms-networks:ewon_cosy\+_4g_na:-:::::::*
	cpe:2.3:h:hms-networks:ewon_cosy\+_ethernet:-:::::::*
	cpe:2.3:h:hms-networks:ewon_cosy\+_wifi:-:::::::*

History

21 Nov 2024, 09:17

Type	Values Removed	Values Added
References		() http://seclists.org/fulldisclosure/2024/Aug/19 -

03 Sep 2024, 19:02

Type	Values Removed	Values Added
CPE		cpe:2.3:h:hms-networks:ewon_cosy\+_ethernet:-:::::::* cpe:2.3:o:hms-networks:ewon_cosy\+_firmware:::::::: cpe:2.3:h:hms-networks:ewon_cosy\+_4g_jp:-:::::::* cpe:2.3:h:hms-networks:ewon_cosy\+_4g_na:-:::::::* cpe:2.3:h:hms-networks:ewon_cosy\+_4g_eu:-:::::::* cpe:2.3:h:hms-networks:ewon_cosy\+_wifi:-:::::::* cpe:2.3:h:hms-networks:ewon_cosy\+_4g_apac:-:::::::*
First Time		Hms-networks ewon Cosy\+ Firmware Hms-networks ewon Cosy\+ 4g Jp Hms-networks ewon Cosy\+ Wifi Hms-networks Hms-networks ewon Cosy\+ 4g Apac Hms-networks ewon Cosy\+ Ethernet Hms-networks ewon Cosy\+ 4g Eu Hms-networks ewon Cosy\+ 4g Na
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.1
References	~~() https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/ -~~	() https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/ - Exploit, Third Party Advisory
References	~~() https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf -~~	() https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf - Vendor Advisory
References	~~() https://www.ewon.biz/products/cosy/ewon-cosy-wifi -~~	() https://www.ewon.biz/products/cosy/ewon-cosy-wifi - Product
References	~~() https://www.hms-networks.com/cyber-security -~~	() https://www.hms-networks.com/cyber-security - VDB Entry, Vendor Advisory
CWE		CWE-79

12 Aug 2024, 16:15

Type	Values Removed	Values Added
References		() https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/ -

05 Aug 2024, 12:41

Type	Values Removed	Values Added
Summary		(es) Los dispositivos Cosy+ que ejecutan un firmware 21.x inferior a 21.2s10 o un firmware 22.x inferior a 22.1s3 son vulnerables a XSS cuando muestran los registros debido a una sanitización de entrada inadecuada. Esto se solucionó en las versiones 21.2s10 y 22.1s3.

02 Aug 2024, 18:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-02 18:16

Updated : 2024-11-21 09:17

NVD link : CVE-2024-33893

Mitre link : CVE-2024-33893

CVE.ORG link : CVE-2024-33893

JSON object : View

Products Affected

hms-networks

ewon_cosy\+_ethernet
ewon_cosy\+_wifi
ewon_cosy\+_firmware
ewon_cosy\+_4g_na
ewon_cosy\+_4g_apac
ewon_cosy\+_4g_jp
ewon_cosy\+_4g_eu

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.1 /10