CVE-2017-9131

Name of the Vulnerable Software and Affected Versions Mimosa Client Radios versions prior to 2.2.3 Mimosa Backhaul Radios versions prior to 2.2.3

Description An issue allows an attacker to gather information and craft a command to reboot a client remotely by connecting to the Mosquitto broker on an access point and one of its clients. This can be exploited to act as a DoS attack on the client by re-sending the command endlessly.

Recommendations For Mimosa Client Radios versions prior to 2.2.3, update to version 2.2.3 or later to resolve the issue. For Mimosa Backhaul Radios versions prior to 2.2.3, update to version 2.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the Mosquitto broker to minimize the risk of exploitation.