Vendor
HMS Networks
8 known vulnerabilities.
HMS Networks at a glance
- Last 12 months
- 5
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 5 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 1 | 0 |
| Dec 2024 | 1 | 0 |
Products
Latest advisories
-
High max 7.1ICSA-26-293-01 5 CVEs
HMS Networks PEAK-System PCAN Windows drivers
Successful exploitation of these vulnerabilities could crash the Windows kernel.
-
Medium max 5.7ICSA-25-023-06 1 CVE
HMS Networks Ewon Flexy 202
Successful exploitation of this vulnerability could allow an attacker to disclose sensitive user credentials.
-
High max 8.2ICSA-24-291-04 1 CVE
HMS Networks EWON FLEXY 202
Successful exploitation of this vulnerability could allow an attacker to sniff and decode credentials that are transmitted using weak encoding techniques.
-
LowICSA-20-254-03 1 CVE
HMS Networks Ewon Flexy and Cosy
Successful exploitation of this vulnerability could allow attackers to retrieve limited confidential information.
-
Critical max 9.6ICSA-20-210-03 1 CVE
HMS Industrial Networks eCatcher
Successful exploitation of this vulnerability could crash the device being accessed. In addition, a buffer overflow condition may allow remote code execution with highest privileges.
8 results · Feed
-
Medium 5.5
HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency
PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.
-
Medium 5.5
HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
-
High 7.1
HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index
The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.
-
Medium 5.5
HMS Networks PEAK-System PCAN Windows drivers Classic Buffer Overflow
The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record.
-
Medium 5.5
HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds Write
The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had been rejected as invalid.
-
Medium 5.7
HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information
EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.
-
High 8.6
Authenticated Remote Code Execution
A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).
-
High 8.2
HMS Networks EWON FLEXY 202 Insufficiently Protected Credentials
The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials.