Security vulnerabilities have been disclosed in the industrial remote access solution Ewon Cosy+ that can be exploited to gain root privileges on the devices and perform follow-up attacks. The elevated access can then be used as a weapon to decrypt encrypted firmware files and encrypted data such as passwords in configuration files, and even obtain properly signed X.509 VPN certificates for foreign