Lucene search
PRIOn knowledge basePRION:CVE-2023-28718HistoryMar 28, 2023 - 9:15 p.m.
Code injection
2023-03-2821:15:00
PRIOn knowledge base
www.prio-n.com
1
code injection
osprey pump controller
http requests
administrative privileges
security vulnerability
Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performing any checks to verify the requests. This may allow an attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.
| CPE | Name | Operator | Version |
|---|---|---|---|
| osprey_pump_controller_firmware | eq | 1.01 |
Related
cve
cve
CVE-2023-28718
2023-03-28 21:15:11
cvelist
cvelist
CVE-2023-28718 CVE-2023-28718
2023-03-28 20:09:15
nvd
nvd
CVE-2023-28718
2023-03-28 21:15:11
zeroscience
zeroscience
Osprey Pump Controller 1.0.1 Cross-Site Request Forgery
2023-02-27 00:00:00
ics
ics
ProPump and Controls Osprey Pump Controller (Update A)
2024-02-08 12:00:00