CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2018-12543
High (7.5) in eclipse mosquitto. EPSS 36% chance of exploitation in the next 30 days.
In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an assert is triggered that should otherwise not be reachable and Mosquitto will exit.
Severity
- EPSS
- 36% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-20, CWE-617
- Published
- Modified
- Record from
- the NVD, synced
Affected
- eclipse:mosquitto