Critical severity9.8NVD Advisory· Published Nov 15, 2023· Updated Jun 17, 2026

CVE-2023-41442

Description

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kloudq Technologies Limited/Tor Equip / Tor Loco Minidescription
Kloudq Technologies/Tor Equipllm-fuzzy
Range: 1.0
Kloudq Technologies/Tor Loco Minillm-fuzzy
Range: 1.0 through 3.1
Kloudq/Tor Loco Min
cpe:2.3:a:kloudq:tor_loco_min:*:*:*:*:*:mqtt:*:*
Range: >=1.0,<=3.1
Kloudq/Tor Equip Gateway
cpe:2.3:a:kloudq:tor_equip_gateway:1.0:*:*:*:*:mqtt:*:*
Kloudq/Tor Shield
cpe:2.3:a:kloudq:tor_shield:1.0:*:*:*:*:mqtt:*:*
Kloudq/Tor Lenz
cpe:2.3:a:kloudq:tor_lenz:0.0.1:*:*:*:*:mqtt:*:*

Patches

Vulnerability mechanics

References

writeups.ayyappan.me/v/tor-iot-mqtt/nvdExploitPress/Media CoverageThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000