CVE-2024-33896
- Reference to the description:
- Description:
- Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s3.
- Last updated date:
- 09/03/2024
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 09/03/2024
- Reference url to background
https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/