PT-2026-97024
CVE-2026-87121
·
تاريخ النشر
2026-09-22
·
تاريخ التحديث
2026-09-22
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
lwIP TCP/IP Stack MQTT (affected versions not specified)
Description
The MQTT client in the lwIP TCP/IP Stack contains an out-of-bounds write flaw. This issue allows an unauthenticated attacker to achieve remote code execution on the device, potentially enabling lateral movement across industrial networks where unencrypted industrial protocols are used.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Implement runtime segmentation to contain post-compromise activity.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾