Beveiligingsadvies

CVE-2023-28375

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-03-28 20:02:00
Laatst bijgewerkt 2025-01-16 21:38:35
Toegewezen door icscert
CVSS-score 7.5
Status PUBLISHED

Beschrijving

Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.