CyberRota Analysis
AI-GeneratedThe Sustainable Irrigation Platform (SIP) up to version 5.2.16 is vulnerable to a server-side request forgery (SSRF) that allows unauthenticated attackers to send arbitrary HTTP requests by providing a malicious callback URL, particularly when the Node-RED plugin is enabled. This vulnerability can lead to unauthorized access to internal or external systems, potentially exposing sensitive data or services. Organizations using this platform, especially those with the Node-RED plugin installed, should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callback URL when the optional Node-RED plugin is installed. Attackers can exploit the lack of destination validation and the default passphrase 'opendoor' to send blind HTTP requests to arbitrary internal or external hosts not otherwise directly accessible.
Related CVEs
Other vulnerabilities affecting the same vendor(s)