CVE-2018-6907 A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the RainMachine device via....
HighCVSS 8.8
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the RainMachine device via the REST API.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rainmachine web application | All versions | No fix listed |
References
- www.irongeek.com exploit third-party-advisory