TLDRVuln - Cybersecurity Vulnerabilities Made Simple

CVE-2023-28712

High · published March 28, 2023

CVSS v3.1

8.2

EPSS

Percentile

67.6

In the wild

Unconfirmed

What it is

Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could allow system access with www-data permissions.

The record

Technical detail

CVSS v3.1: 8.2 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.01185 · 67.6th percentile
Published: 2023-03-28T20:10Z

EPSS history

Timeline

28 MAR 20:10Z
CVE-2023-28712
cvelistv5