Skip to content
OpenAdvisories

Vendor

HMS Networks

8 known vulnerabilities.

Products

PEAK-System Device Driver Setup 5 PCAN Windows CAN device drivers 5 Ewon Flexy 202 2 Ewon Flexy 205 1 eCatcher 0 eWON Cosy 0 eWON Flexy 0 Flexy and Cosy 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-103672

    HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array Index

    The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stack destination.

    HMS Networks PEAK-System Device Driver Setup PCAN Windows CAN device drivers Windows
  • High 8.6
    CVE-2024-9154

    Authenticated Remote Code Execution

    A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. This issue affects Ewon Flexy 205: through 14.8s0 (#2633).

    HMS Networks Ewon Flexy 205
  • High 8.2
    CVE-2024-7755

    HMS Networks EWON FLEXY 202 Insufficiently Protected Credentials

    The EWON FLEXY 202 transmits credentials using a weak encoding method base64. An attacker who is present in the network can sniff the traffic and decode the credentials.

    HMS Networks Ewon Flexy 202