CVE-2023-46706 MachineSense FeverWarn Use of Hard-coded Credentials
MachineSense FeverWarn devices contain hard-coded credentials that cannot be changed, allowing attackers to bypass authentication and take over devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-46706?
CVE-2023-46706 is a critical vulnerability in MachineSense FeverWarn, published on 1 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple MachineSense devices have credentials unable to be changed by the user or administrator.
Weakness: CWE-798
Which versions are affected by CVE-2023-46706?
It affects 1 product.
Products include Machinesense Feverwarn Firmware.
How do I fix CVE-2023-46706?
No fix has been published for CVE-2023-46706 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-46706 being exploited?
There is no known exploitation of CVE-2023-46706 in the wild and no public exploit code.
Other vulnerabilities in MachineSense FeverWarn
- CVE-2023-49617 MachineSense FeverWarn Missing Authentication for Critical Function
- CVE-2023-47867 MachineSense FeverWarn Improper Access Control
- CVE-2023-49610 MachineSense FeverWarn Improper Input Validation
- CVE-2023-6221 MachineSense FeverWarn Missing Authentication for Critical Function
- CVE-2023-49115 MachineSense FeverWarn Missing Authentication for Critical Function
Sources
Also known as GHSA-mh9r-mh3m-pcgq.