CVE-2023-33379
Published: 04 August 2023
Summary
CVE-2023-33379 is a critical-severity an unspecified weakness vulnerability in Connectedio Er2000T-Vz-Cat1 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked at the 29.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-37542
Vulnerability details
Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands…
more
to all of Connected IO's devices.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.