Thales Unsecured MQTT Communication Vulnerability Allowing Topic Manipulation

A vulnerability exists in Thales products that utilize the MQTT communications protocol, where an attacker with network access and valid credentials can exploit unencrypted MQTT messages to write on server topics that manage MQTT communications. This flaw arises from the lack of encryption in the MQTT protocol, leaving the communication open to interception and manipulation.

Impact

Exploitation of this vulnerability allows for unauthorized writing on server topics via the MQTT protocol, potentially leading to further manipulation or disruption of the MQTT communication flow.