CVE-2024-0390

INPRAX "iZZi connect" application on Android contains hard-coded MQTT queue credentials. The same MQTT queue is used by corresponding physical recuperation devices. Exploiting this vulnerability could potentially allow unauthorized access to manage and read parameters of the recuperation unit...

CVE-2024-0390

CVE-2024-0390 affects INPRAX iZZi connect for Android. The vulnerability stems from hard-coded MQTT queue credentials used by the iZZi connect app and the associated recuperation devices, enabling unauthorized access to read and manage parameters of the reQnet iZZi unit. Affected versions are pri...

INPRAX iZZi Trust Management Issues Vulnerabilities

INPRAX iZZi is an application from INPRAX Corporation. A security vulnerability exists in versions prior to INPRAX iZZi 2024010401 that stems from the inclusion of hard-coded queue credentials that could allow unauthorized access to manage and read recovery unit parameters...