CVE-2023-41442

2023-11-1500:00:00

mitre

www.cve.org

remote code execution

vulnerability

kloudq technologies

tor equip

tor loco mini

mqtt component

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

68.1%

JSON

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.

References

writeups.ayyappan.me/v/tor-iot-mqtt/