CVE-2024-33892

HIGH

7.5

CVSS Score

Published: August 2, 2024 at 12:00 AM UTC

Updated: June 17, 2026 at 07:32 AM UTC

8 products affected across 1 vendorEwon Cosy+ FirmwareEwon Cosy+ WIFIEwon Cosy+ 4G Eu

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in version 21.2s10 and 22.1s3

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ewon Cosy+ Firmware · Hms Networks

95%

21.0 ≤ v < 21.2s1021.0s0 ≤ v < 21.2s1022.0 ≤ v < 22.1s322.0s0 ≤ v < 22.1s321.0 22.0

Affected range stops below 21.2s10, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.1s3, so it looks safe — our inference, not a vendor statement

hms-networks-ewon-cosy-4g-apac (same device) · hms-networks-ewon-cosy-4g-eu (same device) · hms-networks-ewon-cosy-4g-jp (same device) · hms-networks-ewon-cosy-4g-na (same device) · hms-networks-ewon-cosy-ethernet (same device) · hms-networks-ewon-cosy-wifi (same device)

Networks Ewon Cosy · Hms Networks

60%

21.0 ≤ v < 21.2s1022.0 ≤ v < 22.1s321.0 22.0

Affected range stops below 21.2s10, so it looks safe — our inference, not a vendor statement

Affected range stops below 22.1s3, so it looks safe — our inference, not a vendor statement

Ewon Cosy+ 4G Apac · Hms Networksdevice

80%

All versions

Ewon Cosy+ 4G Eu · Hms Networksdevice

80%

All versions

Ewon Cosy+ 4G Jp · Hms Networksdevice