The FrodoBots EarthRover Mini+ firmware version 6.2.4_6.2.5_0.614.0 contains a vulnerability that allows unauthenticated remote code execution via MQTT messages. The firmware accepts arbitrary shell commands through AWS IoT MQTT messages and executes them as root. Access control relies solely on shared IoT credentials without per-device authentication, enabling attackers to execute commands remotely across the device fleet.