CVE-2023-28395: Propumpservice Osprey Pump Controller Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. This may allow an attacker to hijack a session by predicting the session id and gain unauthorized access to the product.

Affected products

• Propumpservice Osprey Pump Controller Firmware: version 1.01 only

Published 2023-03-28. Last modified 2026-06-17.