CVE-2023-46706

creationtimestamp| type| source ---|---|--- 2024-02-02 00:26:22+00:00| seen| https://t.me/ctinow/177836 2024-02-18 16:11:43+00:00| seen| https://t.me/ctinow/187289...

CVE-2023-46706

Multiple MachineSense devices have credentials unable to be changed by the user or administrator...

CVE-2023-46706

CVE-2023-46706 concerns MachineSense FeverWarn devices where credentials cannot be changed by users/admins and may rely on hard-coded credentials. Connected sources (CISA ICS advisory, CNNVD/CNNVD-202401-2442, PRION, CVE lists) describe a broader set of related authentication and access-control i...

MachineSense FeverWarn

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : MachineSense LLC. Equipment : MachineSense FeverWarn Vulnerabilities: Missing Authentication for Critical Function, Use of Hard-coded Credentials, Improper Access Control, OS Command...