Mini 8 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:rainmachine:mini-8_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Rainmachine (d554895c-d264-5ef5-ada9-0e6178868c5b) |
|---|---|
| Product | Mini 8 Firmware (1d0e3e1c-0e48-5217-9f1f-728ed978141a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6908 |
vulnerable | 2026-06-08 05:11:54.390720 |
Details available
An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the device via a 127.0.0.1:port value in the HTTP 'Host' header, as demonstrated by retrieving credentials.
Published: 2018-11-01T17:00:00.000Z
Updated: 2024-08-05T06:17:16.871Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6012 |
vulnerable | 2026-06-08 05:11:53.236416 |
Details available
The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python code via the 'Add new weather data source' upload function.
Published: 2018-11-01T17:00:00.000Z
Updated: 2024-08-05T05:47:56.266Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6011 |
vulnerable | 2026-06-08 05:11:53.234877 |
Details available
The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator's password hash to generate a 6-digit temporary passcode that can be used for remote and local access, aka a "Use of Password Hash Instead of Password for Authentication" issue. This is exploitable by an attacker who discovers a hash value in the rainmachine-settings.sqlite file.
Published: 2018-11-01T17:00:00.000Z
Updated: 2024-08-05T05:47:56.184Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.