deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-6567
Published: 2024-08-02
Description: The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have display_errors set to true. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. The plugin vendor removed the test files, however, did not increment the version meaning this is inadequately patched in the same version that is affected.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/ebook-store/trunk/fpdi/fpdi-protection-master/local-tests/simple.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3138305%40ebook-store%2Ftrunk&old=3051174%40ebook-store%2Ftrunk&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3138305%40ebook-store&new=3138305%40ebook-store&sfp_email=&sfph_mail=
CVE: CVE-2024-7376
Published: 2024-08-02
Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Realtime Quiz System 1.0. Affected is an unknown function of the file /print_quiz_records.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273360.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://gist.github.com/topsky979/8c36e6a899fc02e8054f67b94e34f6c6; https://vuldb.com/?ctiid.273360; https://vuldb.com/?id.273360
CVE: CVE-2024-7377
Published: 2024-08-02
Description: A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view_result.php. The manipulation of the argument qid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273361 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/4415a08deadd16356484d5ff540e60f9; https://vuldb.com/?ctiid.273361; https://vuldb.com/?id.273361
CVE: CVE-2024-7378
Published: 2024-08-02
Description: A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_question.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273362 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/d4cb58afc5fb41f647b1021d1364d846; https://vuldb.com/?ctiid.273362; https://vuldb.com/?id.273362
CVE: CVE-2024-38482
Published: 2024-08-02
Description: CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could potentially exploit this vulnerability, leading to execute unauthorized actions and retrieve sensitive information from the database.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-703
References: https://www.dell.com/support/kbdoc/en-us/000227493/dsa-2024-343-security-update-for-dell-cloudlink-vulnerability
CVE: CVE-2024-42458
Published: 2024-08-02
Description: server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type, a related issue to CVE-2006-2369.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/any1/neatvnc/commit/cc71650a69abc2573a0d96d082409d2468802d47; https://github.com/any1/neatvnc/compare/v0.8.0...v0.8.1; https://github.com/any1/neatvnc/releases/tag/v0.8.1
CVE: CVE-2024-7389
Published: 2024-08-02
Description: The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-forminator-addon-hubspot-wp-api.php. This makes it possible for unauthenticated attackers to extract the HubSpot integration developer API key and make unauthorized changes to the plugin's HubSpot integration or expose personally identifiable information from plugin users using the HubSpot integration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-522
References: https://developers.hubspot.com/docs/api/webhooks#manage-settings-via-api; https://developers.hubspot.com/docs/api/webhooks#scopes; https://plugins.trac.wordpress.org/changeset/3047085/forminator/trunk/addons/pro/hubspot/lib/class-forminator-addon-hubspot-wp-api.php
CVE: CVE-2024-3827
Published: 2024-08-02
Description: The Spectra Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block ids in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpspectra.com/product/spectra-pro/#spectra-pro-1-1-5-released; https://www.wordfence.com/threat-intel/vulnerabilities/id/3fb6123c-2891-4cfd-8d68-a922c30d7600?source=cve
CVE: CVE-2024-5595
Published: 2024-08-02
Description: The Essential Blocks  WordPress plugin before 4.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f2b8f092-4fc0-4edc-ba0f-d4312c2e5dec/
CVE: CVE-2024-39392
Published: 2024-08-02
Description: InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/indesign/apsb24-48.html
CVE: CVE-2024-39396
Published: 2024-08-02
Description: InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb24-48.html
CVE: CVE-2024-3238
Published: 2024-08-02
Description: The WordPress Menu Plugin — Superfly Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.29. This is due to missing or incorrect nonce validation on the ajax_handle_delete_icons() function. This makes it possible for unauthenticated attackers to delete arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Please not the CSRF was patched in 5.0.28, however, adequate directory traversal protection wasn't introduced until 5.0.30.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://codecanyon.net/item/superfly-responsive-wordpress-menu-plugin/8012790; https://www.wordfence.com/threat-intel/vulnerabilities/id/3608fce3-0869-4516-ae08-68108f733c37?source=cve
CVE: CVE-2024-42459
Published: 2024-08-02
Description: In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-347
References: https://github.com/indutny/elliptic/pull/317; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-42460
Published: 2024-08-02
Description: In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-130
References: https://github.com/indutny/elliptic/pull/317; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-42461
Published: 2024-08-02
Description: In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347, CWE-347
References: https://github.com/indutny/elliptic/pull/317; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-38776
Published: 2024-08-02
Description: Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson WP GoToWebinar allows Cross-Site Scripting (XSS).This issue affects WP GoToWebinar: from n/a through 15.7.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-gotowebinar/wordpress-wp-gotowebinar-plugin-15-7-csrf-to-xss-vulnerability?_s_id=cve
CVE: CVE-2024-27181
Published: 2024-08-02
Description: In Apache Linkis <= 1.5.0,

Privilege Escalation in Basic management services where the attacking user is 

a trusted account

 allows access to Linkis's Token information. Users are advised to upgrade to version 1.6.0, which fixes this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://lists.apache.org/thread/hosd73l7hxb3rpt5rb0yg0ld11zph4c6; http://www.openwall.com/lists/oss-security/2024/08/02/3
CVE: CVE-2024-27182
Published: 2024-08-02
Description: In Apache Linkis <= 1.5.0,

Arbitrary file deletion in Basic management services on 

A user with an administrator account could delete any file accessible by the Linkis system user

.
Users are recommended to upgrade to version 1.6.0, which fixes this issue.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-552, CWE-552
References: https://lists.apache.org/thread/2of1p433h8rbq2bx525rtftnk19oz38h; http://www.openwall.com/lists/oss-security/2024/08/02/4
CVE: CVE-2024-36268
Published: 2024-08-02
Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.

This issue affects Apache InLong: from 1.10.0 through 1.12.0, which could lead to Remote Code Execution. Users are advised to upgrade to Apache InLong's 1.13.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/10251
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://lists.apache.org/thread/1w1yp1bg5sjvn46dszkf00tz1vfs0frc; http://www.openwall.com/lists/oss-security/2024/08/02/5
CVE: CVE-2024-40719
Published: 2024-08-02
Description: The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a legitimate server and interact with it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: https://www.twcert.org.tw/en/cp-139-7970-e8ac5-2.html; https://www.twcert.org.tw/tw/cp-132-7964-5b266-1.html
CVE: CVE-2024-4643
Published: 2024-08-02
Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘end_redirect_link’ parameter in versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/trunk/modules/countdown/widgets/countdown.php#L2501; https://plugins.trac.wordpress.org/changeset/3110404/; https://plugins.trac.wordpress.org/changeset/3110404/bdthemes-element-pack-lite/trunk/modules/countdown/widgets/countdown.php
CVE: CVE-2024-38876
Published: 2024-08-02
Description: A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Controller R9.2 (All versions), Omnivise T3000 Product Data Management (PDM) R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions), Omnivise T3000 Terminal Server R9.2 (All versions), Omnivise T3000 Thin Client R9.2 (All versions), Omnivise T3000 Whitelisting Server R9.2 (All versions). The affected application regularly executes user modifiable code as a privileged user. This could allow a local authenticated attacker to execute arbitrary code with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-552
References: https://cert-portal.siemens.com/productcert/html/ssa-857368.html; http://seclists.org/fulldisclosure/2024/Nov/5
CVE: CVE-2024-38877
Published: 2024-08-02
Description: A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Controller R9.2 (All versions), Omnivise T3000 Network Intrusion Detection System (NIDS) R9.2 (All versions), Omnivise T3000 Product Data Management (PDM) R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions), Omnivise T3000 Security Server R9.2 (All versions), Omnivise T3000 Terminal Server R9.2 (All versions), Omnivise T3000 Thin Client R9.2 (All versions), Omnivise T3000 Whitelisting Server R9.2 (All versions). The affected devices stores initial system credentials without sufficient protection.  An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss allowing the attacker to laterally move within the affected network.
CVSS Score: 8.2 (HIGH)
CWE: CWE-312
References: https://cert-portal.siemens.com/productcert/html/ssa-857368.html; http://seclists.org/fulldisclosure/2024/Nov/5
CVE: CVE-2024-38878
Published: 2024-08-02
Description: A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). Affected devices allow authenticated users to export diagnostics data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download arbitrary files from the file system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://cert-portal.siemens.com/productcert/html/ssa-857368.html; http://seclists.org/fulldisclosure/2024/Nov/5
CVE: CVE-2024-38879
Published: 2024-08-02
Description: A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). The affected system exposes the port of an internal application on the public network interface allowing an attacker to circumvent authentication and directly access the exposed application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/html/ssa-857368.html; http://seclists.org/fulldisclosure/2024/Nov/5
CVE: CVE-2024-40720
Published: 2024-08-02
Description: The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.twcert.org.tw/en/cp-139-7971-d9584-2.html; https://www.twcert.org.tw/tw/cp-132-7965-8285d-1.html
CVE: CVE-2024-40721
Published: 2024-08-02
Description: The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.twcert.org.tw/en/cp-139-7972-01a6e-2.html; https://www.twcert.org.tw/tw/cp-132-7966-8c6c3-1.html
CVE: CVE-2024-40722
Published: 2024-08-02
Description: The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily disrupting its service.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://www.twcert.org.tw/en/cp-139-7973-e10c6-2.html; https://www.twcert.org.tw/tw/cp-132-7967-9efdf-1.html
CVE: CVE-2024-40723
Published: 2024-08-02
Description: The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the HWATAIServiSign, temporarily disrupting its service.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://www.twcert.org.tw/en/cp-139-7974-0562f-2.html; https://www.twcert.org.tw/tw/cp-132-7968-ce2ef-1.html
CVE: CVE-2024-6704
Published: 2024-08-02
Description: The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.21. This is due to a lack of filtering of HTML tags in comments. This makes it possible for unauthenticated attackers to add HTML such as hyperlinks to comments when rich editing is disabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wpdiscuz/trunk/class.WpdiscuzCore.php#L335; https://plugins.trac.wordpress.org/changeset/3124810/; https://www.wordfence.com/threat-intel/vulnerabilities/id/fa3501a4-7975-4f90-8037-f8a06c293c07?source=cve
CVE: CVE-2024-7204
Published: 2024-08-02
Description: Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box. Once the recipient views the message, they will be subject to a Stored XSS attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.twcert.org.tw/en/cp-139-7975-3e810-2.html; https://www.twcert.org.tw/tw/cp-132-7969-7827e-1.html
CVE: CVE-2024-7323
Published: 2024-08-02
Description: Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server .
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-36, CWE-22
References: https://www.twcert.org.tw/en/cp-139-7990-87183-2.html; https://www.twcert.org.tw/tw/cp-132-7989-9c4ea-1.html
CVE: CVE-2024-38890
Published: 2024-08-02
Description: An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks.
CVSS Score: 8.4 (HIGH)
CWE: CWE-294
References: https://packetstormsecurity.com/files/179892/Caterease-Software-SQL-Injection-Command-Injection-Bypass.html; https://vuldb.com/?id.273374
CVE: CVE-2024-41127
Published: 2024-08-02
Description: Monkeytype is a minimalistic and customizable typing test. Monkeytype is vulnerable to Poisoned Pipeline Execution through Code Injection in its ci-failure-comment.yml GitHub Workflow, enabling attackers to gain pull-requests write access. The ci-failure-comment.yml workflow is triggered when the Monkey CI workflow completes. When it runs, it will download an artifact uploaded by the triggering workflow and assign the contents of ./pr_num/pr_num.txt artifact to the steps.pr_num_reader.outputs.content WorkFlow variable. It is not validated that the variable is actually a number and later it is interpolated into a JS script allowing an attacker to change the code to be executed. This issue leads to pull-requests write access. This vulnerability is fixed in 24.30.0.
CVSS Score: 8.3 (HIGH)
CWE: CWE-74, CWE-94
References: https://github.com/monkeytypegame/monkeytype/commit/29627fd0d5f152e2da[PII_REDACTED]0ea0a5c29874; https://github.com/monkeytypegame/monkeytype/security/advisories/GHSA-wcjf-5464-4wq9; https://securitylab.github.com/advisories/GHSL-2024-167_monkeytype
CVE: CVE-2024-7029
Published: 2024-08-02
Description: Commands can be injected over the network and executed without authentication.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt; https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07
CVE: CVE-2024-41310
Published: 2024-08-02
Description: AndServer 2.1.12 is vulnerable to Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://gist.github.com/Gppp23333/f915655ff17df9a0fd1d92e3e2096cb9
CVE: CVE-2024-41517
Published: 2024-08-02
Description: An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a list of all users and their corresponding privileges.
CVSS Score: 5.3 (MEDIUM)
References: http://feripro.de; http://mecodia.de; https://piuswalter.de/blog/multiple-vulnerabilities-in-feripro/
CVE: CVE-2024-41518
Published: 2024-08-02
Description: An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations and participants.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://feripro.de; http://mecodia.de; https://piuswalter.de/blog/multiple-vulnerabilities-in-feripro/
CVE: CVE-2024-41519
Published: 2024-08-02
Description: Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://feripro.de; http://mecodia.de; https://piuswalter.de/blog/multiple-vulnerabilities-in-feripro/
CVE: CVE-2024-7314
Published: 2024-08-02
Description: anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://github.com/vulhub/vulhub/tree/master/aj-report/CNVD-2024-15077; https://github.com/yuebusao/AJ-REPORT-EXPLOIT; https://vulncheck.com/advisories/aj-report-swagger
CVE: CVE-2024-33892
Published: 2024-08-02
Description: Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in version 21.2s10 and 22.1s3
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-281
References: https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/; https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf; https://www.ewon.biz/products/cosy/ewon-cosy-wifi