CVE-2023-28712: Propumpservice Osprey Pump Controller Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Osprey Pump Controller version 1.01 contains an unauthenticated command injection vulnerability that could allow system access with www-data permissions.

Affected products

• Propumpservice Osprey Pump Controller Firmware: version 1.01 only

Published 2023-03-28. Last modified 2026-06-17.