CVE-2023-45851

Summary

CVE-2023-45851: A vulnerability was discovered in the Android Client application that connects to MQTT brokers without enforcing server authentication. This weakness enables an attacker to force the application to connect to a malicious MQTT broker, potentially allowing the transmission of fake messages to the HMI device. This could result in unauthorized access, manipulation or denial of service. Users are advised to secure their MQTT connections and ensure authentication mechanisms are properly implemented.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.