New Rock Technologies Cloud Connected Devices Wildcard Topic Subscription Vulnerability

A vulnerability exists in the Cloud MQTT service of New Rock Technologies Cloud Connected Devices, including the OM500 IP-PBX, MX8G VoIP Gateway, and NRP1302/P Desktop IP Phone, all versions. The vulnerability arises from improper neutralization of wildcards in topic subscriptions, allowing attackers to intercept and access sensitive information from the service's communications.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information by intercepting communications within the Cloud MQTT service.