VULNERABILITY INTELLIGENCE

CVE-2023-6221

CVSS score7.7 HIGH

EPSS probability0.58%

CISA KEVNot currently listed

Published2024-02-01

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Description

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

Weakness classification

ics-cert@hq.dhs.gov: CWE-306
nvd@nist.gov: CWE-306

Primary references

ics-cert@hq.dhs.gov — Product
ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Product
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource