← volver
CVE-2023-6221

MachineSense FeverWarn Missing Authentication for Critical Function

CVSS 7.7 HIGHEPSS 0.6%CWE-306
The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Productos afectados
MachineSense · FeverWarn

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →