osprey pump controller firmware vulnerabilities and fixes

Recent CVEs affecting osprey pump controller firmware, with upgrade or downgrade steps. 9 tracked.

Also searched as: ospreypumpcontrollerfirmware.

osprey pump controller firmware has 9 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-03-28. Highest priority: CVE-2023-27394 (score 64/100).

• CVE-2023-28718 HIGH 7.1 MITIGATE Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performi
• CVE-2023-28712 HIGH 8.2 MITIGATE Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could all
• CVE-2023-28654 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that a
• CVE-2023-28648 HIGH 7.5 MITIGATE Osprey Pump Controller version 1.01 inputs passed to a GET parameter are not properly sanitized before being r
• CVE-2023-28398 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authen
• CVE-2023-28395 HIGH 8.3 MITIGATE Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be pre
• CVE-2023-28375 HIGH 7.5 MITIGATE Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure
• CVE-2023-27886 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability
• CVE-2023-27394 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability

FAQ

How do I fix osprey pump controller firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is osprey pump controller firmware being exploited right now?

None of the tracked osprey pump controller firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which osprey pump controller firmware CVE should I patch first?

CVE-2023-27394 currently ranks highest (64/100): Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability.

RSS feed for osprey pump controller firmware · ← Back to latest CVEs