Cosy+ devices running firmware versions 21.x below 21.2s10 or 22.x below 22.1s3 have an insecure permissions vulnerability that can lead to information leakage through cookies. This vulnerability has been addressed in firmware versions 21.2s10 and 22.1s3.