High severity8.3NVD Advisory· Published Mar 28, 2023· Updated Jun 17, 2026
CVE-2023-28395
CVE-2023-28395
Description
Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. This may allow an attacker to hijack a session by predicting the session id and gain unauthorized access to the product.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 1.01
- Range: 1.01
Patches
Vulnerability mechanics
References
1- www.cisa.gov/news-events/ics-advisories/icsa-23-082-06nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.