CVE-2023-28375: Propumpservice Osprey Pump Controller Firmware

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.

Affected products

• Propumpservice Osprey Pump Controller Firmware: version 1.01 only

Published 2023-03-28. Last modified 2026-06-17.