Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-426p-c3p2-xqhp

Опубликовано: 04 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's devices.

Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's devices.

EPSS

Процентиль: 24%
0.00083
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's devices.

EPSS

Процентиль: 24%
0.00083
Низкий

9.8 Critical

CVSS3