GCVE - cpe:2.3:o:machinesense:feverwarn_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:machinesense:feverwarn_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Machinesense (`c46d0435-6401-5db1-976f-9584c9809071`)
Product	Feverwarn Firmware (`104ed82c-a63d-52e3-afc5-84101507e4b3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-6221`	vulnerable	2026-06-08 06:19:46.588073	MachineSense FeverWarn Missing Authentication for Critical Function HIGH (7.7) The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more. Published: 2024-02-01T22:18:31.089Z Updated: 2025-05-15T19:51:24.142Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 https://machinesense.com/pages/about-machinesense	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-49617`	vulnerable	2026-06-08 06:14:29.258667	MachineSense FeverWarn Missing Authentication for Critical Function CRITICAL (10) The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication. Published: 2024-02-01T22:26:29.123Z Updated: 2025-06-06T17:26:50.942Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 https://machinesense.com/pages/about-machinesense	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-49610`	vulnerable	2026-06-08 06:14:29.244265	MachineSense FeverWarn Improper Input Validation HIGH (8.1) MachineSense FeverWarn Raspberry Pi-based devices lack input sanitization, which could allow an attacker on an adjacent network to send a message running commands or could overflow the stack. Published: 2024-02-01T22:35:12.834Z Updated: 2024-10-17T16:03:08.150Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 https://machinesense.com/pages/about-machinesense	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-49115`	vulnerable	2026-06-08 06:14:28.523898	MachineSense FeverWarn Missing Authentication for Critical Function HIGH (7.5) MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users. Published: 2024-02-01T22:28:08.697Z Updated: 2024-08-02T21:46:28.903Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 https://machinesense.com/pages/about-machinesense	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47867`	vulnerable	2026-06-08 06:14:25.874574	MachineSense FeverWarn Improper Access Control HIGH (8.8) MachineSense FeverWarn devices are configured as Wi-Fi hosts in a way that attackers within range could connect to the device's web services and compromise the device. Published: 2024-02-01T22:30:59.328Z Updated: 2024-08-02T21:16:43.765Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 https://machinesense.com/pages/about-machinesense	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46706`	vulnerable	2026-06-08 06:14:22.832956	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.