CVE-2018-6907: Rainmachine Web Application

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API.

Affected products

• Rainmachine Rainmachine Web Application: affected versions not specified

Published 2018-11-01. Last modified 2026-06-17.