{"id":"CVE-2023-6221","aliases":["EUVD-2023-58468","GHSA-cxwq-x5m7-2p4v"],"status":"published","title":"MachineSense FeverWarn  Missing Authentication for Critical Function","description":"The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00582,"percentile":0.48134,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2024-02-01T22:18:31Z","modified":"2026-06-17T06:50:19Z","products":[{"vendor":"machinesense","product":"feverwarn"},{"vendor":"machinesense","product":"feverwarn_firmware"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-01","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://machinesense.com/pages/about-machinesense","tags":["x_transferred","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6221"},{"url":"https://github.com/advisories/GHSA-cxwq-x5m7-2p4v"}],"sources":{"cve":[{"id":"CVE-2023-6221","title":"MachineSense FeverWarn  Missing Authentication for Critical Function","description":"\nThe cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.\n\n","status":"published","published":"2024-02-01T22:18:31.089Z","modified":"2025-05-15T19:51:24.142Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:35:25.469654Z"}],"euvd":[{"id":"EUVD-2023-58468","description":"\nThe cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.\n\n","status":"published","published":"2024-02-01T22:18:31Z","modified":"2025-05-15T19:51:24Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:32:45.606938Z"}],"ghsa":[{"id":"GHSA-cxwq-x5m7-2p4v","title":"\nThe cloud provider MachineSense uses for integration and deployment for multiple MachineSense...","description":"\nThe cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.\n\n","status":"published","published":"2024-02-02T00:31:27Z","modified":"2024-02-02T00:31:35Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:55:31.84746Z"}],"nvd":[{"id":"CVE-2023-6221","description":"\nThe cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller (PLC), PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal procedures could view source code, secret credentials, and more.\n\n","status":"published","published":"2024-02-01T23:15:10.51Z","modified":"2026-06-17T06:50:19.69Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:09:04.527564Z"}]}}