Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cxwq-x5m7-2p4v

Опубликовано: 02 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

EPSS

Процентиль: 24%
0.00082
Низкий

7.7 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.7
nvd
около 2 лет назад

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

CVSS3: 7.7
fstec
около 2 лет назад

Уязвимость компонента MachineSense микропрограммного обеспечения систем теплового сканирования FeverWarn ESP32, FeverWarn RaspberryPi и системы централизованного хранения и управления данными FeverWarn DataHub RaspberryPi, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 24%
0.00082
Низкий

7.7 High

CVSS3

Дефекты

CWE-306