CVE-2023-33379

Summary

CVE-2023-33379 is a vulnerability affecting Connected IO v2.1.0 and prior. The issue lies in a misconfiguration of their MQTT broker, which is used for management and device communication. This flaw enables devices to connect to the broker and impersonate the Connected IO management platform, thereby issuing commands to other devices. As a result, an attacker can potentially control all of Connected IO's connected devices. This vulnerability poses a significant risk, as it allows unauthorized access and control over the targeted devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.