Логотип exploitDog
bind:CVE-2023-28398
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-28398

Количество 3

Количество 3

nvd логотип

CVE-2023-28398

больше 2 лет назад

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor who successfully exploits this vulnerability could gain access to the pump controller and cause disruption in operation, modify data, or shut down the controller.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-xxmg-8g8r-g92f

больше 2 лет назад

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor who successfully exploits this vulnerability could gain access to the pump controller and cause disruption in operation, modify data, or shut down the controller.

CVSS3: 9.8
EPSS: Низкий
fstec логотип

BDU:2023-08521

больше 2 лет назад

Уязвимость микропрограммного обеспечения контроллеров для управления насосными станциями Osprey Pump Controller, позволяющая нарушителю изменить произвольные данные или вызвать отказ в обслуживании

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-28398

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor who successfully exploits this vulnerability could gain access to the pump controller and cause disruption in operation, modify data, or shut down the controller.

CVSS3: 9.8
0%
Низкий
больше 2 лет назад
github логотип
GHSA-xxmg-8g8r-g92f

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor who successfully exploits this vulnerability could gain access to the pump controller and cause disruption in operation, modify data, or shut down the controller.

CVSS3: 9.8
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2023-08521

Уязвимость микропрограммного обеспечения контроллеров для управления насосными станциями Osprey Pump Controller, позволяющая нарушителю изменить произвольные данные или вызвать отказ в обслуживании

CVSS3: 9.8
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу