https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-33897.htmlhttps://patchthecve.com/cve/CVE-2024-33897.htmlWed, 17 Jun 2026 07:32:31 +0000CRITICAL 9.1: A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024.https://patchthecve.com/cve/CVE-2024-33896.htmlhttps://patchthecve.com/cve/CVE-2024-33896.htmlWed, 17 Jun 2026 07:32:31 +0000HIGH 7.2: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s3.https://patchthecve.com/cve/CVE-2024-33895.htmlhttps://patchthecve.com/cve/CVE-2024-33895.htmlWed, 17 Jun 2026 07:32:31 +0000MEDIUM 6.6: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device.https://patchthecve.com/cve/CVE-2024-33894.htmlhttps://patchthecve.com/cve/CVE-2024-33894.htmlWed, 17 Jun 2026 07:32:31 +0000HIGH 8.8: Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges.https://patchthecve.com/cve/CVE-2024-33893.htmlhttps://patchthecve.com/cve/CVE-2024-33893.htmlWed, 17 Jun 2026 07:32:30 +0000MEDIUM 6.1: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization. This is fixed in version 21.2s10 and 22.1s3.https://patchthecve.com/cve/CVE-2024-33892.htmlhttps://patchthecve.com/cve/CVE-2024-33892.htmlWed, 17 Jun 2026 07:32:30 +0000HIGH 7.5: Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in version 21.2s10 and 22.1s3https://patchthecve.com/cve/CVE-2024-6558.htmlhttps://patchthecve.com/cve/CVE-2024-6558.htmlWed, 17 Jun 2026 08:18:14 +0000MEDIUM 6.3: HMS Industrial Networks Anybus-CompactCom 30 products are vulnerable to a XSS attack caused by the lack of input sanitation checks. As a consequence, it is possible to insert HTML code into input fields and store the HTML code. The stored HTML code will be embedded in the page and executed by host