EUVD-2026-71741
GHSA-7cxh-qwcx-3964
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description explicitly restricts exploitation to same network segment (AV:A); no credentials or interaction needed; impact is confidentiality-only via passive sniffing.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational data, including device identifiers, message metadata, and control-related information.
AnalysisAI
Plaintext MQTT transmission in Trueview TI8161 firmware 6.0.23.4 exposes all device communications on TCP port 1883 to passive interception by any attacker on the same network segment. The device sends MQTT traffic without TLS encryption, allowing recovery of device identifiers, operational metadata, and control-related payloads with no authentication required. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network adjacency - the attacker must be on the same Layer-2 network segment (wired LAN, VLAN, or wireless broadcast domain) as the Trueview TI8161 device. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 7.5 with AV:N overstates reachability - the description explicitly requires the attacker to share a network segment with the device, which maps to AV:A (adjacent), reducing the realistic base score to approximately 6.5. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified at the time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all TI8161 deployments and verify their network placement; determine whether MQTT functionality is operationally required or can be disabled. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today