CVE-2019-6241 - In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker

Back Back to CVE browser

HIGH

In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker

Published Jun 10, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.39%

Description

In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15808
Advisory
https://github.com/insi2304/MQTTRoute-fuzz/blob/master/MQTT_Route_crash.png
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15808		Advisory
https://github.com/insi2304/MQTTRoute-fuzz/blob/master/MQTT_Route_crash.png		x_refsource_MISCExploitThird Party Advisory