Executive Summary

This vulnerability in Telpo MDM versions 1.4.6 through 1.4.9 for Android involves sensitive administrator credentials and MQTT server connection details being stored in plaintext within log files on the device's external storage. An attacker who gains access to these log files can use the credentials to authenticate to the MDM web platform and perform administrative actions such as device shutdown, factory reset, or software installation. Additionally, the attacker can connect to the MQTT server to intercept or publish device data.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker with access to the device's external storage to gain administrative control over the MDM platform, enabling them to perform disruptive actions like shutting down devices, resetting them to factory settings, or installing unauthorized software. Furthermore, the attacker can intercept or manipulate device data by connecting to the MQTT server, potentially compromising device integrity and data confidentiality.

Useful 0 Not Useful 0