CVE-2024-9154 — Authenticated Remote Code Execution

CVE-2024-9154

Authenticated Remote Code Execution PUBLISHED

Description (CNA)

A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).

Affected (CNA)

Vendor / product	Versions
HMS Networks / Ewon Flexy 205	affected 0 through 14.8s0 (#2633)

CWE

CWE-94

References

https://cyberdanube.com/security-research/authenticated-remote-code-execution-in-ewon-flexy-205/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Dec/18