Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2023-49617

MachineSense FeverWarn Missing Authentication for Critical Function

The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Machinesense
Products
Feverwarn Feverwarn Firmware
CVE-2023-6221

MachineSense FeverWarn Missing Authentication for Critical Function

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Machinesense
Products
Feverwarn Feverwarn Firmware
CVE-2023-49610

MachineSense FeverWarn Improper Input Validation

MachineSense FeverWarn Raspberry Pi-based devices lack input sanitization, which could allow an attacker on an adjacent network to send a message running commands or could overflow the stack.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Machinesense
Products
Feverwarn Feverwarn Firmware
CVE-2023-49115

MachineSense FeverWarn Missing Authentication for Critical Function

MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Machinesense
Products
Feverwarn Feverwarn Firmware
CVE-2023-47867

MachineSense FeverWarn Improper Access Control

MachineSense FeverWarn devices are configured as Wi-Fi hosts in a way that attackers within range could connect to the device's web services and compromise the device.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Machinesense
Products
Feverwarn Feverwarn Firmware