Lucene search

K
nvd[email protected]NVD:CVE-2023-49115
HistoryFeb 01, 2024 - 11:15 p.m.

CVE-2023-49115

2024-02-0123:15:09
CWE-306
web.nvd.nist.gov
5
machinesense devices
unauthenticated mqtt
remote viewing
sensor data

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users.

Affected configurations

NVD
Node
machinesensefeverwarn_firmwareMatch-
AND
machinesensefeverwarnMatch-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

Related for NVD:CVE-2023-49115