CVE-2023-6221CWE-306

MachineSense FeverWarn Missing Authentication for Critical Function

High · published February 1, 2024

CVSS v3.1
7.7
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00582 · 47.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2024-02-01T22:18Z
EPSS history
Timeline
  • 01 FEB 22:18Z
    MachineSense FeverWarn Missing Authentication for Critical Function
    cvelistv5