A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30). The affected devices stores MQTT client passwords without sufficient protection on the devices. An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: siemens
Published: 2024-05-14T10:02:26.227Z
Updated: 2024-08-02T01:52:57.288Z
Reserved: 2024-04-04T11:43:06.066Z
Link: CVE-2024-31486
Vulnrichment
Updated: 2024-05-14T18:22:24.367Z
NVD
Status : Awaiting Analysis
Published: 2024-05-14T16:16:51.723
Modified: 2024-07-04T07:15:10.823
Link: CVE-2024-31486
Redhat
No data.