CyberRota Analysis
AI-GeneratedThe MQTT service in Trueview 6.0.23.4 is vulnerable due to a lack of authentication, permitting remote attackers to connect to the broker on TCP port 1883 without credentials. This vulnerability allows unauthorized users to publish or subscribe to messages, potentially leading to data leakage or manipulation. Organizations using this version of Trueview should prioritize addressing this issue to mitigate the risk of unauthorized access and data compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations.