Skip to content
OpenAdvisories

Product · ProPump and Controls

Osprey Pump Controller

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-28398

    CVE-2023-28398

    Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providi…

    ProPump and Controls Osprey Pump Controller
  • Critical 9.8
    CVE-2023-27394 EPSS 18%

    CVE-2023-27394

    Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView…

    ProPump and Controls Osprey Pump Controller
  • Critical 9.8
    CVE-2023-27886

    CVE-2023-27886

    Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP POST parameter called by index.php script.

    ProPump and Controls Osprey Pump Controller
  • Critical 9.8
    CVE-2023-28654

    CVE-2023-28654

    Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that allows full access to the web management interface configuration. The user is not visible in Usernames and Passwords menu list of the application and …

    ProPump and Controls Osprey Pump Controller