CVE-2023-49617

CVE-2023-49617 concerns the MachineSense FeverWarn API, where the programmable interface allegedly lacked authentication, enabling remote retrieval or modification of sensitive information. Connected sources (Red Hat, NVD, CISA ICS advisory, CNNVD, PRION, etc.) confirm an authentication flaw affe...

MachineSense FeverWarn

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : MachineSense LLC. Equipment : MachineSense FeverWarn Vulnerabilities: Missing Authentication for Critical Function, Use of Hard-coded Credentials, Improper Access Control, OS Command...