Cosy+ devices with firmware versions 21.x below 21.2s10 or 22.x below 22.1s3 use a unique key to encrypt configuration parameters that is not unique per device. This vulnerability is fixed in firmware versions 21.2s10 and 22.1s3, where the encryption key is made unique per device.