Threats tagged 'ghsa-q2v4-p94c-8xcp'

A critical vulnerability exists in D-Link M60 version 1.12.B01 within the emDaemon MQTT Broker component's system function in /etc/emDaemon/mosquitto.conf. This flaw involves hard-coded credentials, allowing remote attackers to exploit it without privileges or user interaction. The vulnerability has a maximum CVSS score of 10.0, indicating severe impact on confidentiality, integrity, and availability. Public exploit code has been disclosed.