← back
CVE-2023-6221

MachineSense FeverWarn Missing Authentication for Critical Function

CVSS 7.7 HIGHEPSS 0.6%CWE-306
The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products
MachineSense · FeverWarn

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →