Security Advisory

CVE-2023-33379

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-08-04 00:00:00
Last updated 2024-10-17 15:16:20
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's devices.