The vulnerability arises from improper neutralization of special elements in OS commands, enabling attackers to inject system commands. This leads to remote code execution on the affected gateway devices and is classified as Command Injection (CWE-94).

Affected devices are HMS Networks Ewon Flexy firmware versions earlier than 15.0s4 and Cosy+ firmware 22.xx before 22.1s6 or firmware 23.xx before 23.0s3. No additional product details are available beyond these model and firmware ranges.

The CVSS score is 8.8, indicating high severity. The EPSS score is below 1%, reflecting low likelihood of exploitation. Exploitation requires authenticated access with low‑privilege credentials on the gateway; therefore, an attacker must first obtain valid credentials. The vulnerability is not listed in the CISA KEV catalog, suggesting it may not yet have known active exploitation, but its high severity plus credential requirement still demand swift action.