CVE-2023-27394

🗓️ 28 Mar 2023 21:10:15Reported by icscertType

Osprey Pump Controller v1.01 unauthenticated OS command injection vuln

Reporter	Title	Published	Views	Family All 7
Prion	Command injection	28 Mar 202321:15	–	prion
NVD	CVE-2023-27394	28 Mar 202321:15	–	nvd
Cvelist	CVE-2023-27394 CVE-2023-27394	28 Mar 202320:05	–	cvelist
Zero Science Lab	Osprey Pump Controller 1.0.1 (eventFileSelected) Command Injection	27 Feb 202300:00	–	zeroscience
Trellix	Industrial and Manufacturing CVEs: Addressing the SCADA in the Room	22 May 202300:00	–	trellix
Trellix	Industrial and Manufacturing CVEs: Addressing the SCADA in the Room	22 May 202300:00	–	trellix
ICS	ProPump and Controls Osprey Pump Controller (Update A)	8 Feb 202412:00	–	ics

Nvd

Node

propumpservice osprey_pump_controller_firmwareMatch1.01

AND

propumpservice osprey_pump_controllerMatch-

[
  {
    "vendor": "ProPump and Controls, Inc.",
    "product": "Osprey Pump Controller",
    "versions": [
      {
        "status": "affected",
        "version": "1.01"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-082-06

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Mar 2023 21:15Current

10High risk

Vulners AI Score10

CVSS39.8

EPSS0.002

CWE-78