{"id":"CVE-2023-41442","aliases":["EUVD-2023-45942","GHSA-x29p-wg4m-mxg4"],"status":"published","title":"An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a...","description":"An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01303,"percentile":0.70879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2023-11-15T00:00:00Z","modified":"2026-06-17T06:22:06Z","products":[{"vendor":"kloudq","product":"tor_equip_gateway"},{"vendor":"kloudq","product":"tor_lenz"},{"vendor":"kloudq","product":"tor_loco_min"},{"vendor":"kloudq","product":"tor_shield"}],"references":[{"url":"https://writeups.ayyappan.me/v/tor-iot-mqtt/","tags":["x_transferred","Exploit","Press/Media Coverage","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41442"},{"url":"https://github.com/advisories/GHSA-x29p-wg4m-mxg4"}],"sources":{"cve":[{"id":"CVE-2023-41442","description":"An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.","status":"published","published":"2023-11-15T00:00:00Z","modified":"2024-08-02T19:01:35.325Z","updated_at":"2026-11-02T14:35:19.217111Z"}],"euvd":[{"id":"EUVD-2023-45942","description":"An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.","status":"published","published":"2023-11-15T00:00:00Z","modified":"2024-08-02T19:01:35Z","updated_at":"2026-11-03T03:50:01.043754Z"}],"ghsa":[{"id":"GHSA-x29p-wg4m-mxg4","title":"An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a...","description":"An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.","status":"published","published":"2023-11-16T00:30:55Z","modified":"2023-12-10T05:05:22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:55:10.314842Z"}],"nvd":[{"id":"CVE-2023-41442","description":"An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.","status":"published","published":"2023-11-15T22:15:27.673Z","modified":"2026-06-17T06:22:06.03Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:08:47.966245Z"}]}}