Description
Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView.php scripts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ProPump and Controls | Osprey Pump Controller | 1.01 | — |
Advisories 1
- ICSA-23-082-06 ProPump and Controls Osprey Pump Controller (Update A) CISA ICS & IT advisories · Feb 8, 2024