CVE-2024-9154: Authenticated Remote Code Execution

Severity: high (CVSS 8.6 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-19 · updated 2026-06-17
Weakness: CWE-94

Description

A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).

Affected products

HMS Networks Ewon Flexy 205: through 14.8s0 (#2633)

References

https://cyberdanube.com/security-research/authenticated-remote-code-execution-in-ewon-flexy-205/
http://seclists.org/fulldisclosure/2024/Dec/18

Get alerted when CVE-2024-9154 or the next vulnerability affects your stack