The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication.
References
Link | Resource |
---|---|
https://machinesense.com/pages/about-machinesense | Product |
https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01 | Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: icscert
Published: 2024-02-01T22:26:29.123Z
Updated: 2024-02-01T22:26:29.123Z
Reserved: 2023-11-30T20:38:25.990Z
Link: CVE-2023-49617
JSON object: View
NVD Information
Status : Modified
Published: 2024-02-01T23:15:10.227
Modified: 2024-05-17T02:31:09.227
Link: CVE-2023-49617
JSON object: View
Redhat Information
No data.
CWE