Vendor/product archive

hms-networks / ewon_cosy_firmware CVEs

Beta · best-effort

2 CVEs tagged to hms-networks / ewon_cosy_firmware — 0 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to hms-networks vendor archive

CVE-2020-16230

Published Sep 18, 2020

All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains can request resources. An attacker with local access and high privileges could injec…

CVSS 2.3 · Low

Vendor/product tagsBeta · best-effort

CVE-2020-10633

Published Apr 8, 2020

A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0). An attacker could send a specially crafted URL to…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1