Rainmachine

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Rainmachine records in CISA KEV

No Rainmachine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mini-8 Firmware 3 records MEDIUM Rainmachine Web Application 3 records LOW Touch Hd 12 Firmware 1 record MEDIUM

Records

3 records in Mini-8 Firmware · all components

TI-2018-05044 CVE-2018-6908 · GHSA-rpcg-pm3j-2f73

An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8…

MEDIUM 45

An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the devi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01598 Published 2018-11-01 No fix listed CWE-287

TI-2018-04380 CVE-2018-6012 · GHSA-jh26-c29m-rh6m

The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd…

MEDIUM 45

The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python code via the 'Add new weather data source' upload function.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01343 Published 2018-11-01 No fix listed CWE-94

TI-2018-04379 CVE-2018-6011 · GHSA-53m3-jvjq-85xq

The time-based one-time-password (TOTP) function in the application logic of the Green…

LOW 38

The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator's password hash to generate a 6-digit temporary passcode that…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01131 Published 2018-11-01 No fix listed CWE-287

Open these records in search →

Critical	2
High	2
Medium	2
Low	0
No CVSS	0