Vulnerabilities

TI-2018-05044 CVE-2018-6908 · GHSA-rpcg-pm3j-2f73

An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8…

MEDIUM 45

An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the devi…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01598 Published 2018-11-01 No fix listed CWE-287

TI-2018-04380 CVE-2018-6012 · GHSA-jh26-c29m-rh6m

The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd…

MEDIUM 45

The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python code via the 'Add new weather data source' upload function.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01343 Published 2018-11-01 No fix listed CWE-94

TI-2018-04379 CVE-2018-6011 · GHSA-53m3-jvjq-85xq

The time-based one-time-password (TOTP) function in the application logic of the Green…

LOW 38

The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator's password hash to generate a 6-digit temporary passcode that…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01131 Published 2018-11-01 No fix listed CWE-287

Vulnerabilities

Filters

An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8…

The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd…

The time-based one-time-password (TOTP) function in the application logic of the Green…