CVE-2024-31486

A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without sufficient protection on the devices. An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss.

Affected products

Opupi0 Amqp/Mqtt

CVSS 4.0

6.0 MEDIUM

CVSS 3.1

5.3 MEDIUM

EPSS

0.5% (40th percentile)

Weakness

CWE-312

NVD status

Deferred

Published

2024-05-14