PatchTheCVEpropumpservice vulnerabilities
Recent CVEs affecting propumpservice products. 9 tracked.
propumpservice has 9 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-03-28. Highest priority: CVE-2023-27394 (score 64/100).
- CVE-2023-28718 HIGH 7.1 MITIGATE Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performi
- CVE-2023-28712 HIGH 8.2 MITIGATE Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could all
- CVE-2023-28654 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that a
- CVE-2023-28648 HIGH 7.5 MITIGATE Osprey Pump Controller version 1.01 inputs passed to a GET parameter are not properly sanitized before being r
- CVE-2023-28398 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authen
- CVE-2023-28395 HIGH 8.3 MITIGATE Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be pre
- CVE-2023-28375 HIGH 7.5 MITIGATE Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure
- CVE-2023-27886 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability
- CVE-2023-27394 CRITICAL 9.8 MITIGATE Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability
FAQ
How do I fix propumpservice vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is propumpservice being exploited right now?
None of the tracked propumpservice CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which propumpservice CVE should I patch first?
CVE-2023-27394 currently ranks highest (64/100): Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability.