Known Vulnerabilities for Osprey Pump Controller by Propumpservice
Listed below are 9 of the newest known vulnerabilities associated with "Osprey Pump Controller" by "Propumpservice".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-28718 json | Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performing any checks t... | 8 - HIGH | 2023-03-28 | 2023-11-07 |
| CVE-2023-28712 json | Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could allow system acces... | 9.8 - CRITICAL | 2023-03-28 | 2023-11-07 |
| CVE-2023-28654 json | Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that allows full acce... | 9.8 - CRITICAL | 2023-03-28 | 2023-11-07 |
| CVE-2023-28648 json | Osprey Pump Controller version 1.01 inputs passed to a GET parameter are not properly sanitized before being returned to the ... | 6.1 - MEDIUM | 2023-03-28 | 2023-11-07 |
| CVE-2023-28398 json | Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, there... | 9.8 - CRITICAL | 2023-03-28 | 2023-11-07 |
| CVE-2023-28395 json | Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can ... | 7.5 - HIGH | 2023-03-28 | 2023-11-07 |
| CVE-2023-28375 json | Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can... | 7.5 - HIGH | 2023-03-28 | 2023-11-07 |
| CVE-2023-27886 json | Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be explo... | 9.8 - CRITICAL | 2023-03-28 | 2023-11-07 |
| CVE-2023-27394 json | Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploite... | 9.8 - CRITICAL | 2023-03-28 | 2023-11-07 |