CVE-2023-28395 — CVE-2023-28395
Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. This…
Published: 2023-03-28 · CVSS: 8.3 · CVSS 3.1
Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. This may allow an attacker to hijack a session by predicting the session id and gain unauthorized access to the product.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7