CVE-2023-28712

Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could allow system access with www-data permissions...

CVE-2023-28712

CVE-2023-28712 affects the Osprey Pump Controller, specifically version 1.01, with an unauthenticated command injection vulnerability that can grant system access with www-data permissions. Multiple connected sources (NVD, RH Red Hat advisory, ICS-CISA update) confirm an unauthenticated command e...