CVE-2026-79390
UnknownSummary
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational data, including device identifiers, message metadata, and control-related information.
Risk Assessment
Intercepting MQTT traffic can expose confidential device data and allow an attacker to analyze or manipulate control, threatening operational security.
Recommendation
Encrypt MQTT communication (e.g., using TLS) and consider using secure network protocols.
Other vulnerabilities in Trueview
See all- CVE-2026-79391Unknown
The MQTT service in Trueview 6.0.23.4 has no authentication. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations.
- CVE-2026-79389Unknown
Trueview T18161 S 6.0.23.4 contains improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the associated commands.
Original NVD description (English source)
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational data, including device identifiers, message metadata, and control-related information.