CVE-2017-2894

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose version 6.8

Description A stack buffer overflow issue exists in the MQTT packet parsing functionality. This can be triggered by a specially crafted MQTT SUBSCRIBE packet, potentially leading to remote code execution. An attacker can exploit this by sending a crafted MQTT packet over the network.

Recommendations For Cesanta Mongoose version 6.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.