CVE-2023-27394 (published 2023-03-28T20:05:21.304Z)
Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView.php scripts.
Affected products: Vendor: ProPump and Controls, Inc.
Product: Osprey Pump Controller
Versions: 1.01