CVE-2024-33896

HIGH 7.2EPSS 4.0%

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s3.

CVSS v3.1: 7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 4.02% chance of exploitation in the next 30 days, 90th percentile
Published: 2024-08-02
Updated: 2025-11-04

ExploitDB entries (1)

https://www.exploit-db.com/exploits/52160

References

Related