CVE-2024-6786CWE-24
MXview One Series vulnerable to Path Traversal
Medium · published September 21, 2024
What it is
The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.
The record
Technical detail
- CVSS v4.0
- 6.0 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00554 · 45.5th percentile
- Weakness
- CWE-24 · Path Traversal: '../filedir'
- Published
- 2024-09-21T04:14Z
EPSS history
Timeline