Rainmachine Mini-8 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Rainmachine Mini-8 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-6012 — CVSS 9.8 (critical): The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject arbitrary Python…
• CVE-2018-6908 — CVSS 9.8 (critical): An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application…
• CVE-2018-6011 — CVSS 8.1 (high): The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses…