CVE-2025-0432— HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information
Quick assessment
Affected
HMS Networks Ewon Flexy 202
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HMS EWON FLEXY 202是瑞典HMS公司的一个多用途 IIoT 数据网关。允许机器制造商和用户监控和收集重要的 KPI，以便进行分析和预测性维护。 HMS EWON FLEXY 202存在安全漏洞，该漏洞源于当添加用户或通过其网页更改用户凭证时以明文形式传输用户凭证，不加密。
Possible ATT&CK Techniques 1 AI
T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-0432
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information
Source: CVE Program / CVE List V5
Vulnerability Description
EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的明文传输
Source: CVE Program / CVE List V5
Vulnerability Title
HMS EWON FLEXY 202 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HMS EWON FLEXY 202是瑞典HMS公司的一个多用途 IIoT 数据网关。允许机器制造商和用户监控和收集重要的 KPI，以便进行分析和预测性维护。 HMS EWON FLEXY 202存在安全漏洞，该漏洞源于当添加用户或通过其网页更改用户凭证时以明文形式传输用户凭证，不加密。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HMS Networks | Ewon Flexy 202 | All | - |
|
II. Public POCs for CVE-2025-0432
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-0432
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: HMS Networks
-
CVE-2026-105960
HMS Networks PEAK-System PCAN Windows drivers Improper Handl -
CVE-2026-110322
HMS Networks PEAK-System PCAN Windows drivers Untrusted Poin -
CVE-2026-103672
HMS Networks PEAK-System PCAN Windows drivers Improper Valid -
CVE-2026-101103
HMS Networks PEAK-System PCAN Windows drivers Classic Buffer -
CVE-2026-109576
HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds
Same weakness: CWE-319
-
CVE-2026-15102
Cleartext Transmission of Sensitive Information in ADP Deskt -
CVE-2026-92832
IBM Aspera Enterprise Webapps Information Disclosure -
CVE-2026-85975
Cleartext transmission in Progress MarkLogic Server Amazon S -
CVE-2026-85973
Cleartext transmission in Progress MarkLogic Server cluster -
CVE-2026-108716
mcp-remote 0.8.0 through 0.14.3 Cleartext Credential Transmi
V. Comments for CVE-2025-0432
No comments yet