Onrender · OT CVE

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://ot-intel-api.onrender.com/ot/cve", {
  method: "GET",
});
const data = await res.json();

curl -X GET \
  "https://ot-intel-api.onrender.com/ot/cve?id=CVE-2023-38802" \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "actively_exploited": false,
  "compensating_controls": [
    "Isolate PLC from IT network via VLAN",
    "Disable web server interface if unused",
    "Deploy unidirectional gateway for historian traffic"
  ],
  "cve_id": "CVE-2019-13945",
  "cvss_score": 6.8,
  "data_sources": [
    "NVD",
    "CISA-KEV",
    "DeepSeek-CTI-Analysis"
  ],
  "freshness": "2025-05-22T10:00:00.000Z",
  "kev_due_date": null,
  "ot_context": {
    "affected_layer": "field_device",
    "ot_adjusted_severity": "high",
    "patch_feasibility": "low — requires maintenance window",
    "production_downtime": true,
    "safety_system_risk": true
  },
  "recommended_action": "HIGH: Schedule patch for next maintenance window.",
  "summary": "A vulnerability has been identified in SIMATIC S7-1200 CPU family (All versions). The web server of the affected devices transmits data without TLS encryption."
}