CVE-2023-49617

CVE-2023-49617 concerns the MachineSense FeverWarn API, where the programmable interface allegedly lacked authentication, enabling remote retrieval or modification of sensitive information. Connected sources (Red Hat, NVD, CISA ICS advisory, CNNVD, PRION, etc.) confirm an authentication flaw affe...

CVE-2023-47867

CVE-2023-47867 affects MachineSense FeverWarn devices (ESP32, RaspberryPi, DataHub RaspberryPi). The shared details describe an improper access control flaw where FeverWarn devices are configured as Wi‑Fi hosts, enabling attackers within range to connect to the device’s web services and compromis...

CVE-2023-49115

CVE-2023-49115 concerns MachineSense FeverWarn devices where unauthenticated MQTT messaging allows remote viewing of sensor data. Affected components include FeverWarn ESP32, FeverWarn RaspberryPi, and FeverWarn DataHub RaspberryPi. Root cause stated across sources is missing authentication for c...

CVE-2023-49610

CVE-2023-49610 affects MachineSense FeverWarn Raspberry Pi-based devices (and related FeverWarn components). The issue is improper input validation that may allow an attacker on an adjacent network to send commands or cause a stack overflow, potentially enabling arbitrary command execution (impac...

CVE-2023-6221

CVE-2023-6221 concerns MachineSense FeverWarn and related devices (FeverWarn ESP32, FeverWarn RaspberryPi, FeverWarn DataHub RaspberryPi, and broader MachineSense components) with an authentication weakness for a critical function. The incident is described as insufficient protection against unau...

CVE-2023-46706

CVE-2023-46706 concerns MachineSense FeverWarn devices where credentials cannot be changed by users/admins and may rely on hard-coded credentials. Connected sources (CISA ICS advisory, CNNVD/CNNVD-202401-2442, PRION, CVE lists) describe a broader set of related authentication and access-control i...