Eld
Monthly
Bransys ELD ships with hardcoded MQTT credentials that grant read access to real-time telemetry for active devices across a subset of carriers whose hardware was provisioned against the affected MQTT broker. An unauthenticated remote attacker (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) who can reach that broker and recover the embedded credentials from firmware or client software can subscribe and read live operational data; impact is confidentiality-only (C:H/I:N/A:N) and is scoped to devices on that specific broker, not all Bransys customers. Reported through CISA ICS channels as ICSA-26-260-01, the exposure is rated 5.9 by both the vendor score and independent assessment; at time of analysis there is no confirmed active exploitation (no CISA KEV listing) and no public exploit identified.
Hardcoded MQTT credentials shipped inside Bransys ELD grant unauthenticated read access to real-time telemetry for every active device belonging to a subset of carriers connected to the affected MQTT broker. Because the static credential is embedded in the product, remote attackers who recover it - for example by reverse-engineering the shipped binary or firmware - can subscribe to the broker with any standard MQTT client, and no user interaction or per-victim authentication is required (PR:N/UI:N). The exposure is confidentiality-only against live fleet data (C:H/I:N/A:N in our assessed CVSS 3.1 vector) and no public exploit code or confirmed active exploitation was identified at time of analysis; the reported CVSS 4.0 score of 8.7 reflects the broad device population reachable with a single shared credential, and CISA ICS advisory ICSA-26-260-01 documents the issue.
Bransys ELD ships with hardcoded MQTT credentials that allow unauthenticated remote attackers to subscribe to the real-time telematics feed for every active device belonging to the subset of carriers that were connected to the affected MQTT broker. The assessed CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms the weakness is remotely reachable, low complexity, and requires no authentication or user interaction, but confines impact to low confidentiality - read-only exposure of real-time data with no integrity or availability effect, consistent with the vendor-side CVSS 4.0 score of 6.9 (VC:L, VI:N, VA:N). No public exploit code has been identified at time of analysis, though the hardcoded-credential nature of the flaw means anyone who extracts the static string from firmware or a decompiled mobile/app binary can reuse it without further tooling; practical exposure is bounded by whether the broker stays network-reachable and still accepts the unchanged credentials.
Bransys ELD ships with hardcoded MQTT credentials that grant read access to real-time telemetry for active devices across a subset of carriers whose hardware was provisioned against the affected MQTT broker. An unauthenticated remote attacker (CVSS:3.1/AV:N/AC:L/PR:N/UI:N) who can reach that broker and recover the embedded credentials from firmware or client software can subscribe and read live operational data; impact is confidentiality-only (C:H/I:N/A:N) and is scoped to devices on that specific broker, not all Bransys customers. Reported through CISA ICS channels as ICSA-26-260-01, the exposure is rated 5.9 by both the vendor score and independent assessment; at time of analysis there is no confirmed active exploitation (no CISA KEV listing) and no public exploit identified.
Hardcoded MQTT credentials shipped inside Bransys ELD grant unauthenticated read access to real-time telemetry for every active device belonging to a subset of carriers connected to the affected MQTT broker. Because the static credential is embedded in the product, remote attackers who recover it - for example by reverse-engineering the shipped binary or firmware - can subscribe to the broker with any standard MQTT client, and no user interaction or per-victim authentication is required (PR:N/UI:N). The exposure is confidentiality-only against live fleet data (C:H/I:N/A:N in our assessed CVSS 3.1 vector) and no public exploit code or confirmed active exploitation was identified at time of analysis; the reported CVSS 4.0 score of 8.7 reflects the broad device population reachable with a single shared credential, and CISA ICS advisory ICSA-26-260-01 documents the issue.
Bransys ELD ships with hardcoded MQTT credentials that allow unauthenticated remote attackers to subscribe to the real-time telematics feed for every active device belonging to the subset of carriers that were connected to the affected MQTT broker. The assessed CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms the weakness is remotely reachable, low complexity, and requires no authentication or user interaction, but confines impact to low confidentiality - read-only exposure of real-time data with no integrity or availability effect, consistent with the vendor-side CVSS 4.0 score of 6.9 (VC:L, VI:N, VA:N). No public exploit code has been identified at time of analysis, though the hardcoded-credential nature of the flaw means anyone who extracts the static string from firmware or a decompiled mobile/app binary can reuse it without further tooling; practical exposure is bounded by whether the broker stays network-reachable and still accepts the unchanged credentials.