Логотип exploitDog
bind:CVE-2023-45851
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-45851

Количество 2

Количество 2

nvd логотип

CVE-2023-45851

больше 2 лет назад

The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-v7pg-gp89-mfh2

больше 2 лет назад

The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-45851

The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device

CVSS3: 8.8
0%
Низкий
больше 2 лет назад
github логотип
GHSA-v7pg-gp89-mfh2

The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device

CVSS3: 8.8
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу