What’s Vulnerable › Vulnerabilities

CVE-2023-28718: CVE-2023-28718

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-28 · updated 2026-06-17
• Weakness: CWE-352

Description

Osprey Pump Controller version 1.01 allows users to perform certain actions via HTTP requests without performing any checks to verify the requests. This may allow an attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.

Affected products

• ProPump and Controls, Inc. Osprey Pump Controller: 1.01

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-082-06

Get alerted when CVE-2023-28718 or the next vulnerability affects your stack