TI-2023-05739 CVE-2023-6248 · GHSA-3q55-c9p4-pq2pData leakage and arbitrary remote code execution in Syrus cloud devicesPriority MEDIUM 51The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service.CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.0122 · Published 2023-11-21 · No fix listed CWE-200