PT-2023-27945 · Kloudq Technologies Limited · Tor Equip+1
CVE-2023-41442
·
Publicado
2023-11-15
·
Atualizado
2023-12-01
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Kloudq Technologies Limited Tor Equip version 1.0
Kloudq Technologies Limited Tor Loco Mini versions 1.0 through 3.1
Description
The issue allows a remote attacker to execute arbitrary code via a crafted request to the "MQTT component".
Recommendations
For Kloudq Technologies Limited Tor Equip version 1.0, consider disabling the MQTT component until a patch is available.
For Kloudq Technologies Limited Tor Loco Mini versions 1.0 through 3.1, restrict access to the MQTT component to minimize the risk of exploitation.
Exploit
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tor Equip
Tor Loco Mini