MQTT Authentication Bypass in Trueview 6.0.23.4

Executive Summary

The vulnerability in Trueview 6.0.23.4 is an authentication bypass in the MQTT service. The MQTT broker on TCP port 1883 allows remote attackers to connect without authentication. This enables unauthorized publish or subscribe operations to the MQTT topics.

Useful 0 Not Useful 0

Detection Guidance

Check if TCP port 1883 is open and accessible without authentication. Use commands like 'nmap -p 1883 <target_IP>' to scan for open ports. If the port is open, test for unauthenticated access by connecting with an MQTT client like 'mosquitto_sub -t test -v' or 'mosquitto_pub -t test -m hello'.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to send or receive sensitive data without permission. This may lead to data leaks, unauthorized control of devices, or disruption of MQTT-based services relying on the broker.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control. GDPR and HIPAA mandate strict authentication and authorization controls for data access. Unauthorized access risks non-compliance and potential legal penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Enable authentication on the MQTT broker. Restrict access to TCP port 1883 using firewalls or network segmentation. Update Trueview to a patched version if available. Monitor network traffic for unauthorized MQTT connections.

Useful 0 Not Useful 0