Description
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ProPump and Controls | Osprey Pump Controller | 1.01 | — |
Advisories 1
- ICSA-23-082-06 ProPump and Controls Osprey Pump Controller (Update A) CISA ICS & IT advisories · Feb 8, 2024