Description
The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MachineSense | FeverWarn | ESP32, RaspberryPi, DataHub RaspberryPi | — |
Advisories 1
- ICSA-24-025-01 MachineSense FeverWarn CISA ICS & IT advisories · Jan 25, 2024