CVE-2017-2894
CriticalSummary
CVE-2017-2894 describes a stack buffer overflow vulnerability in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a buffer overflow, leading to remote code execution.
Risk Assessment
An attacker can exploit this vulnerability for remote code execution, posing a significant threat to the security of the system and the organization's data.
Recommendation
It is recommended to update to the latest version of Cesanta Mongoose to mitigate this vulnerability and to monitor network traffic for potential attack attempts.
Original NVD description (English source)
An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a stack buffer overflow resulting in remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.