CVE-2023-45851

Published: 2023-10-25T18:17Z

Last Modified: 2024-11-21T08:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device > MITRE Terms of Use apply – see LICENSE‑MITRE.txt