CVE-2023-6221

6.5 mediumEPSS 0.6%

Medium (6.5) in machinesense feverwarn firmware. EPSS 0.6% chance of exploitation in the next 30 days.

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-11-01)
CWE: CWE-306
Published: 2024-02-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

machinesense:feverwarn_firmware

References

https://machinesense.com/pages/about-machinesense
https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01
https://machinesense.com/pages/about-machinesense
https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01

Check your stack JSON