PatchTheCVErainmachine vulnerabilities
Recent CVEs affecting rainmachine products. 6 tracked.
rainmachine has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-11-01. Highest priority: CVE-2018-6908 (score 63/100).
- CVE-2018-6909 MEDIUM 6.5 MITIGATE A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12
- CVE-2018-6908 CRITICAL 9.8 UPGRADE UPGRADE An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and
- CVE-2018-6907 HIGH 8.8 MITIGATE A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation)
- CVE-2018-6906 MEDIUM 6.1 MITIGATE A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generat
- CVE-2018-6012 CRITICAL 9.8 UPGRADE The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker
- CVE-2018-6011 HIGH 8.1 UPGRADE The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine
FAQ
How do I fix rainmachine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rainmachine being exploited right now?
None of the tracked rainmachine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rainmachine CVE should I patch first?
CVE-2018-6908 currently ranks highest (63/100): An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and.