Feverwarn Firmware
Vendor:
First CVE: Feb 1, 2024 · Active for 2 years
6
Total CVEs
More Total CVEs than 83% of tracked products
6.0
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
8.3
Avg CVSS
Higher Avg CVSS than 75% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Feverwarn Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 1, 2024
2 years ago
Most Recent CVE
Feb 1, 2024
908 days ago
CVE Severity & Scoring
Feverwarn Firmware6 CVEs
17%
50%
33%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network4 (66.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network2 (33.3%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (16.7%)
High0 (0.0%)
None5 (83.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-46706CRITICAL
Multiple MachineSense devices have credentials unable to be changed by the user or administrator.
| Feb 1, 2024 | 9.8 | 27 | NO | NO |
CVE-2023-49617CRITICAL
The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensi | Feb 1, 2024 | 9.1 | 25 | NO | NO |
CVE-2023-47867HIGH
MachineSense FeverWarn devices are configured as Wi-Fi hosts in a way that attackers within range could connect to the device's web services and compromise the device.
| Feb 1, 2024 | 8.8 | 24 | NO | NO |
CVE-2023-49610HIGH
MachineSense FeverWarn Raspberry Pi-based devices lack input sanitization, which could allow an attacker on an adjacent network to send a message running commands or cou | Feb 1, 2024 | 8.1 | 22 | NO | NO |
CVE-2023-49115HIGH
MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users.
| Feb 1, 2024 | 7.5 | 22 | NO | NO |
CVE-2023-6221MEDIUM
The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, F | Feb 1, 2024 | 6.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Feverwarn Firmware
Top CWEs
Versions
No cataloged versions.