NetSight
critical10.0

CVE-2023-49617

The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication.

Impact

The MachineSense application programmable interface (API) is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication.

Affected products

VendorProductAffected versions
MachinesenseFeverwarn Firmware
All versions

Weakness classification

References