CyberRota Analysis
AI-GeneratedThe iSteamX mobile application has a critical vulnerability that allows authenticated users to access wildcard MQTT topics, potentially exposing sensitive device data and enabling unauthorized control over other users' devices. This could lead to the leakage of user profile information and even physical harm from unintended device activation. Organizations using this application should prioritize remediation to protect user data and prevent potential safety risks.
Original NVD Description
Prior to 9/18/2026, the iSteamX mobile application's AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users' device data and allow the attacker to start and stop other connected users' devices. This risked exposing user profile information and potential scalding due to unintended device activation.