We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-49610

MachineSense FeverWarn Improper Input Validation



Assignericscert
Reserved2023-11-30
Published2024-02-01
Updated2024-10-17

Description

MachineSense FeverWarn Raspberry Pi-based devices lack input sanitization, which could allow an attacker on an adjacent network to send a message running commands or could overflow the stack.



HIGH: 8.1CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Product status

Default status
unaffected

ESP32
affected

RaspberryPi
affected

DataHub RaspberryPi
affected

Credits

Vera Mens of Claroty Research reported these vulnerabilities to CISA. finder

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01

https://machinesense.com/pages/about-machinesense

cve.org CVE-2023-49610

nvd.nist.gov CVE-2023-49610

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.