Rainmachine Mini-8
3 CVEs affecting Rainmachine Mini-8. Latest disclosed: 2018-11-01. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6908 | Critical | 9.8 | 2018-11-01 | An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthen… |
CVE-2018-6012 | Critical | 9.8 | 2018-11-01 | The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python code via the 'Add new… |
CVE-2018-6011 | High | 8.1 | 2018-11-01 | The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator's… |