HMS Networks Ewon Products Stack Buffer Overflow Vulnerability Leading to Denial-of-Service and Unauthenticated Remote Code Execution

A stack buffer overflow vulnerability has been identified in HMS Networks Ewon Flexy and Cosy+ products, allowing for denial-of-service and unauthenticated remote code execution. This vulnerability is present in Ewon Flexy with firmware prior to 15.0s4, and in Ewon Cosy+ with firmware 22.xx prior to 22.1s6, as well as in Cosy+ versions 23.0s0 through 23.0s2. The vulnerability arises from improper handling of data, leading to a buffer overflow that can be exploited to execute code remotely without authentication, in addition to causing a denial-of-service condition by crashing the device or causing it to reboot.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing the device or causing it to reboot. Additionally, the stack buffer overflow can be exploited to execute code remotely on the device without authentication.

Remediation

Users are advised to update their Ewon Flexy and Cosy+ devices to the latest firmware version.