CVE-2020-13849

The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to…

published June 4, 2020

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service (loss of the ability to establish new connections), as demonstrated by SlowITe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02051 · 81.1th percentile
Published
2020-06-04T20:16Z
EPSS history
Timeline
  • 04 JUN 20:16Z
    The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to…
    cvelistv5