Lucene search
K

5 matches found

CNVD
CNVD
added 2018/11/06 12:0 a.m.1 views

Unspecified Vulnerability in Green Electronics RainMachine Mini-8

The Green Electronics RainMachine Mini-8 is a smart irrigation sprinkler from Green Electronics USA. A security vulnerability exists in the application logic in the Green Electronics RainMachine Mini-8 Generation 2 that stems from a function that generates a 6-digit temporary password using a has...

8.1CVSS7AI score0.00556EPSS
Exploits1References1
CNVD
CNVD
added 2018/11/06 12:0 a.m.2 views

Unspecified Vulnerability in Green Electronics RainMachine Mini-8 and Touch HD 12 Web Applications (CNVD-2019-28247)

Green Electronics RainMachine Mini-8 and Touch HD 12 Web Application are both products of American c. Green Electronics RainMachine Mini-8 is a smart irrigation sprinkler. touch HD 12 Web Touch HD 12 Web Application is a web-based touch screen application. A security vulnerability exists in the...

9.8CVSS6.8AI score0.04075EPSS
Exploits1References1
CNVD
CNVD
added 2018/11/06 12:0 a.m.1 views

Green Electronics RainMachine Mini-8 and Touch HD 12 Web Application Cross-Site Request Forgery Vulnerability

Green Electronics RainMachine Mini-8 and Touch HD 12 Web Application are both products of Green Electronics USA.Green Electronics RainMachine Mini-8 is a smart irrigation sprinkler. Green Electronics RainMachine Mini-8 is a smart irrigation sprinkler and Touch HD 12 Web Application is a web-based...

8.8CVSS6.8AI score0.00138EPSS
Exploits1References1
OSV
OSV
added 2018/11/01 5:29 p.m.1 views

CVE-2018-6908

An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the device via a 127.0.0.1:port value in the HTTP 'Host' header, as demonstrated by...

9.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2018/11/01 5:29 p.m.2 views

CVE-2018-6012

The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 2nd generation allows an attacker to inject arbitrary Python code via the 'Add new weather data source' upload function...

9.8CVSS5.9AI score
Exploits0References1
Rows per page
Query Builder