Critical severity9.8NVD Advisory· Published Aug 4, 2023· Updated Jun 17, 2026

CVE-2023-33379

Description

Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's devices.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Connected IO/Connected IOdescription
Connected IO/Connected IOllm-fuzzy
Range: <=2.1.0

Patches

Vulnerability mechanics

References

claroty.com/team82/disclosure-dashboard/cve-2023-33379nvdThird Party Advisory
www.connectedio.com/products/routersnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000