PT-2024-21274

CVE-2024-26001

·

Published

2024-03-12

·

Updated

2025-01-24

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The MQTT stack is susceptible to an unauthenticated remote attack due to improper input validation, allowing an attacker to write memory out of bounds. The brute force attack is not always successful because of memory randomization. An exploit for this issue may exist, with potential links to the exploit code available at https://t.co/iVuBGZrI6Y. Unfortunately, the specific versions of the MQTT stack affected are not mentioned in the provided text. #MQTT #cybersecurityawareness #cybersecurity #infosec #hacker #mqttstack #remotattack #memoryrandomization
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-24-862
Found an issue in the description? Have something to add? Feel free to write us 👾