Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-49617

MachineSense FeverWarn Missing Authentication for Critical Function

Description

The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MachineSense FeverWarn

Default version status: unaffected

  • ESP32affected
  • RaspberryPiaffected
  • DataHub RaspberryPiaffected

References