TLDRVuln - Cybersecurity Vulnerabilities Made Simple

CVE-2023-28375

High · published March 28, 2023

CVSS v3.1

7.5

EPSS

Percentile

74.7

In the wild

Unconfirmed

What it is

Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.01537 · 74.7th percentile
Published: 2023-03-28T20:02Z

EPSS history

Timeline

28 MAR 20:02Z
CVE-2023-28375
cvelistv5