In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker.
References
Link | Resource |
---|---|
https://github.com/insi2304/MQTTRoute-fuzz/blob/master/MQTT_Route_crash.png | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-06-10 10:29
Updated : 2020-08-24 10:37
NVD link : CVE-2019-6241
Mitre link : CVE-2019-6241
JSON object : View
CWE
Products Affected
bevywise
- mqttroute