Lucene search

CVE-2023-28395

🗓️ 28 Mar 2023 20:15:15Reported by icscertType

Osprey Pump Controller v1.01 has weak session token generation, allowing for authentication bypass

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2023-28395	28 Mar 202320:15	–	nvd
Prion	Authorization	28 Mar 202320:15	–	prion
Zero Science Lab	Osprey Pump Controller 1.0.1 Predictable Session Token / Session Hijack	27 Feb 202300:00	–	zeroscience
Vulnrichment	CVE-2023-28395 CVE-2023-28395	28 Mar 202319:59	–	vulnrichment
Cvelist	CVE-2023-28395 CVE-2023-28395	28 Mar 202319:59	–	cvelist
ICS	ProPump and Controls Osprey Pump Controller (Update A)	8 Feb 202412:00	–	ics

Nvd

Node

propumpservice osprey_pump_controller_firmwareMatch1.01

AND

propumpservice osprey_pump_controllerMatch-

[
  {
    "vendor": "ProPump and Controls, Inc.",
    "product": "Osprey Pump Controller",
    "versions": [
      {
        "status": "affected",
        "version": "1.01"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-082-06

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Mar 2023 20:15Current

7.8High risk

Vulners AI Score7.8

CVSS37.5 - 8.3

EPSS0.001

SSVC

CWE-338