CVE-2024-9154

A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).

Score

CVSS 4.0 8.6 High

Status

Deferred - office@cyberdanube.com

Published

2024-12-19

Last modified

2024-12-22

Weaknesses

CWE-94

Affected products

• Ewon Flexy 205 (Hms Networks)

References

• https://cyberdanube.com/security-research/authenticated-remote-code-execution-in-ewon-flexy-205/
• http://seclists.org/fulldisclosure/2024/Dec/18