{"id":"CVE-2025-0432","aliases":["EUVD-2025-1665","GHSA-qgfq-x64c-2prw"],"status":"published","title":"HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information","description":"EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00144,"percentile":0.03735,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2025-01-28T15:56:10Z","modified":"2026-06-17T08:26:27Z","products":[{"vendor":"hms networks","product":"ewon flexy 202"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-06"},{"url":"https://www.hms-networks.com/cyber-security"},{"url":"https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/ewon/manuals-and-guides---installation-guides/best-practices-for-a-secure-usage-of-the-ewon-solution-en.pdf?sfvrsn=37160847_4"},{"url":"https://support.hms-networks.com/hc/en-us/articles/19393244940818-How-to-block-all-the-unused-Ewon-Flexy-Cosy131-services-on-the-LAN-WAN-and-or-VPN-interface"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0432"},{"url":"https://github.com/advisories/GHSA-qgfq-x64c-2prw"}],"sources":{"cve":[{"id":"CVE-2025-0432","title":"HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information","description":"EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.","status":"published","published":"2025-01-28T15:56:10.373Z","modified":"2025-01-28T16:32:42.081Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:32:53.475217Z"}],"euvd":[{"id":"EUVD-2025-1665","description":"EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.","status":"published","published":"2025-01-28T15:56:10Z","modified":"2025-01-28T16:32:42Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:04:11.289823Z"}],"ghsa":[{"id":"GHSA-qgfq-x64c-2prw","title":"EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added,...","description":"EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.","status":"published","published":"2025-01-28T18:31:27Z","modified":"2025-01-28T18:31:31Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:59:42.234766Z"}],"nvd":[{"id":"CVE-2025-0432","description":"EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.","status":"published","published":"2025-01-28T16:15:40.183Z","modified":"2026-06-17T08:26:27.883Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:10:49.841519Z"}]}}