Lucene search
PRIOn knowledge basePRION:CVE-2023-28395HistoryMar 28, 2023 - 8:15 p.m.
Authorization
2023-03-2820:15:00
PRIOn knowledge base
www.prio-n.com
3
authorization
weak session token
predictable algorithm
authentication bypass
authorization bypass
hijacking session
unauthorized access
nvd
Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. This may allow an attacker to hijack a session by predicting the session id and gain unauthorized access to the product.
| CPE | Name | Operator | Version |
|---|---|---|---|
| osprey_pump_controller_firmware | eq | 1.01 |
Related
cvelist
cvelist
CVE-2023-28395 CVE-2023-28395
2023-03-28 19:59:29
cve
cve
CVE-2023-28395
2023-03-28 20:15:15
nvd
nvd
CVE-2023-28395
2023-03-28 20:15:15
zeroscience
zeroscience
Osprey Pump Controller 1.0.1 Predictable Session Token / Session Hijack
2023-02-27 00:00:00
ics
ics
ProPump and Controls Osprey Pump Controller (Update A)
2024-02-08 12:00:00