Rainmachine Web Application

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking,…CVE-2018-6909Rainmachine · 1.1% likely

   CWE-1021

2. A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to inject arb…CVE-2018-6906Rainmachine · 0.7% likely

   CWE-79

3. A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allows an attacker to control the Ra…CVE-2018-6907Rainmachine · 0.5% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.