Skip to content
OpenAdvisories
High · 7.7 CVE-2023-6221 EUVD-2023-58468GHSA-cxwq-x5m7-2p4v

MachineSense FeverWarn Missing Authentication for Critical Function

Published Feb 1, 2024 · Updated May 15, 2025 · Assigned by icscert

Description

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

Affected products

VendorProductAffectedFixed
MachineSense FeverWarn ESP32, RaspberryPi, DataHub RaspberryPi —

Advisories 1

References