ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC IRF Products
The ADS-TEC firewall products IRF1000, IRF2000, and IRF3000 include Eclipse Mosquitto, affected by multiple vulnerabilities. Exploitation requires a compromised upstream MQTT broker, limiting direct device exposure.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3935US | medium6.5 | — | ||
In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming top… | ||||
| CVE-2024-10525US | critical9.8 | — | ||
In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bound… | ||||
| CVE-2024-8376US | high7.5 | — | ||
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNEC… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- Mitigation
Disable MQTT publishing or ensure connections are made only to trusted and TLS-secured MQTT brokers.
- Mitigation
Disable MQTT publishing or ensure connections are made only to trusted and TLS-secured MQTT brokers.
- Mitigation
Disable MQTT publishing or ensure connections are made only to trusted and TLS-secured MQTT brokers.
- Fixed
Update to firmware IRF1000 v2.1.0, IRF2000 v6.1.0, IRF3000 v2.1.0 or later.
- Fixed
Update to firmware IRF1000 v2.1.0, IRF2000 v6.1.0, IRF3000 v2.1.0 or later.
- Fixed
Update to firmware IRF1000 v2.1.0, IRF2000 v6.1.0, IRF3000 v2.1.0 or later.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan