What’s Vulnerable › Vulnerabilities

CVE-2023-6221: MachineSense FeverWarn Missing Authentication for Critical Function

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-01 · updated 2026-06-17
• Weakness: CWE-306

Description

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

Affected products

• MachineSense FeverWarn: all versions

References

• https://machinesense.com/pages/about-machinesense
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01
• https://machinesense.com/pages/about-machinesense
• https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01

Get alerted when CVE-2023-6221 or the next vulnerability affects your stack