Unauthenticated Remote Attacker Can Send and Receive Messages Including Configuration Commands, Reboot Commands, and Firmware Updates

CVE-2023-1083

What is CVE-2023-1083?

An unauthenticated remote attacker with knowledge of a specific MQTT topic name can exploit this vulnerability to send and receive messages. This includes the ability to issue GET/SET configuration commands, execute reboot commands, and perform unauthorized firmware updates on targeted systems. Consequently, this may result in significant security risks, including potential denial of service or compromise of system integrity.

References