Read the docs

Rainmachine

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Rainmachine records in CISA KEV

No Rainmachine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mini-8 Firmware 3 records MEDIUM Rainmachine Web Application 3 records LOW Touch Hd 12 Firmware 1 record MEDIUM

Records

3 records in Rainmachine Web Application · all components

TI-2018-05045 CVE-2018-6909 · GHSA-w9gh-cppp-xrgm

A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd…

Priority LOW 31

A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01064 Published 2018-11-01 No fix listed CWE-1021
TI-2018-05042 CVE-2018-6906 · GHSA-75qh-3jjv-xvr8

A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics…

Priority LOW 28

A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arbitrary JavaScript via the REST API.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2018-11-01 No fix listed CWE-79
Open these records in search →