The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 | Third Party Advisory US Government Resource |
| https://machinesense.com/pages/about-machinesense | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
08 Feb 2024, 16:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://machinesense.com/pages/about-machinesense - Product | |
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 - Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:o:machinesense:feverwarn_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:machinesense:feverwarn:-:*:*:*:*:*:*:* |
|
| CWE | CWE-306 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Machinesense feverwarn
Machinesense feverwarn Firmware Machinesense |
01 Feb 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-01 23:15
Updated : 2024-08-02 09:15
NVD link : CVE-2023-6221
Mitre link : CVE-2023-6221
JSON object : View
Products Affected
machinesense
- feverwarn
- feverwarn_firmware
CWE
CWE-306
Missing Authentication for Critical Function