CVE-2023-49115

HIGH

MachineSense FeverWarn Firmware - Unauthenticated MQTT Access

Title source: llm

MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users.

Core 2

Core References

Product

Third Party Advisory, US Government Resource

CVSS v3 7.5

EPSS 0.0059

EPSS Percentile 43.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-306

Status published

Products (1)

machinesense/feverwarn_firmware

Published Feb 01, 2024

Tracked Since Feb 18, 2026