Vulnerability · Published Jun 4, 2020 · Assigned by mitre
CVE-2020-13849
High 7.5
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 81% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)2.1%top 18.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service (loss of the ability to establish new connections), as demonstrated by SlowITe.
Affected products (as reported)
References
- https://www.mdpi.com/1424-8220/20/10/2932 x_refsource_MISC
- https://doi.org/10.3390/s20102932 x_refsource_MISC