CVE-2023-28398 - CVE House
Back to Database
Status published Critical CVE-2023-28398

CVE-2023-28398

Vulnerability Description

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor who successfully exploits this vulnerability could gain access to the pump controller and cause disruption in operation, modify data, or shut down the controller.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-28398

Credits & Attribution

No credits recorded in the NVD database.

References

More from ProPump and Controls, Inc.

View All →
CVE-2023-28718
CVE-2023-28718
High 7.1
CVE-2023-28712
CVE-2023-28712
High 8.2
CVE-2023-28654
CVE-2023-28654
Critical 9.8
CVE-2023-28648
CVE-2023-28648
High 7.5
CVE-2023-28395
CVE-2023-28395
High 8.3

Affected Vendor

ProPump and Controls, Inc.

View all reports →

Affected Software

Osprey Pump Controller
Vulnerable Versions:
1.01

Timeline

Official Publish: March 28th, 2023
Last Modified: January 16th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.