VULNERABILITY INTELLIGENCE

CVE-2024-6786

CVSS score6.5 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2024-09-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.

Weakness classification

  • psirt@moxa.com: CWE-24
  • nvd@nist.gov: CWE-22

Primary references