Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the associated commands.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/EmbdCDACHyd/CVE/tree/main/CVE-2026-79389 |
|
History
Fri, 04 Sep 2026 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Replay-based Command Injection via MQTT in Trueview T18161 Device | |
| Weaknesses | CWE-285 |
Fri, 04 Sep 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the associated commands. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-09-04T19:56:41.996Z
Reserved: 2026-08-25T00:00:00.000Z
Link: CVE-2026-79389
No data.
Status : Received
Published: 2026-09-04T20:17:28.133
Modified: 2026-09-04T20:17:28.133
Link: CVE-2026-79389
No data.
OpenCVE Enrichment
Updated: 2026-09-04T22:00:06Z
Weaknesses