Lucene search
K

CVE-2023-28395

🗓️ 28 Mar 2023 19:59:29Reported by icscertType 
cve
 cve
🔗 web.nvd.nist.gov👁 57 Views

Osprey Pump Controller v1.01 has weak session token generation, allowing for authentication bypass

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
CNNVD
Osprey Pump Controller 安全特征问题漏洞
24 Mar 202300:00
cnnvd
Cvelist
CVE-2023-28395 CVE-2023-28395
28 Mar 202319:59
cvelist
EUVD
EUVD-2023-32091
3 Oct 202520:07
euvd
ICS
ProPump and Controls Osprey Pump Controller (Update A)
23 Mar 202306:00
ics
NVD
CVE-2023-28395
28 Mar 202320:15
nvd
Prion
Authorization
28 Mar 202320:15
prion
Positive Technologies
PT-2023-7476 · Unknown · Osprey Pump Controller
23 Mar 202300:00
ptsecurity
RedhatCVE
CVE-2023-28395
23 May 202503:36
redhatcve
Vulnrichment
CVE-2023-28395 CVE-2023-28395
28 Mar 202319:59
vulnrichment
Zero Science Lab
Osprey Pump Controller 1.0.1 Predictable Session Token / Session Hijack
27 Feb 202300:00
zeroscience
Rows per page
[
  {
    "vendor": "ProPump and Controls, Inc.",
    "product": "Osprey Pump Controller",
    "versions": [
      {
        "status": "affected",
        "version": "1.01"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 07:54Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.5 - 8.3
EPSS0.00278
SSVC
57