Description
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP POST parameter called by index.php script.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ProPump and Controls | Osprey Pump Controller | 1.01 | — |
Advisories 1
- ICSA-23-082-06 ProPump and Controls Osprey Pump Controller (Update A) CISA ICS & IT advisories · Feb 8, 2024