highpriority · track · 40EPSS 0.030 · 87 %ileEPSS3.0%probability0.030percentile87 %ileEPSS · exploit prediction — probability this CVE is exploited in the next 30 days (0–1), and its percentile rank among all CVEsEUUS
An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
01
cvss
Technical severity, 0–10. One row per scoring source.
9.8
010
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution p…