CVE-2024-33893: Hms-Networks Ewon Cosy+ Firmware

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization. This is fixed in version 21.2s10 and 22.1s3.

Affected products

• Hms-Networks Ewon Cosy+ Firmware: from 21.0, up to and including 21.2s10; from 22.0, up to and including 22.1s3

Published 2024-08-02. Last modified 2026-06-17.