CyberRota Analysis
AI-GeneratedA vulnerability in the MQTT Channel Handler of Sipeed PicoClaw versions up to 0.2.9 allows for incorrect authorization due to manipulation of the client_id argument, which can be exploited remotely. This could potentially lead to unauthorized access or control over affected systems. Organizations using Sipeed PicoClaw should prioritize addressing this issue to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Channel Handler. This manipulation of the argument client_id causes incorrect authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed automatically due to inactivity.