PT-2026-57045 · Sipeed · Picoclaw
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Sipeed PicoClaw versions prior to 0.3.0
Description
An issue exists in the MQTT Channel Handler component within the file pkg/channels/mqtt/mqtt.go. Remote manipulation of the
client id argument leads to incorrect authorization.Recommendations
Update Sipeed PicoClaw to a version newer than 0.2.9.
Restrict access to the
client id argument in the MQTT Channel Handler to minimize the risk of exploitation.Exploit
Fix
Improper Authorization
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Picoclaw