TI-2023-02836 CVE-2023-3028 · GHSA-2hp9-23ww-q73mImproper backend communication allows access and manipulation of the telemetry dataPriority MEDIUM 47Insufficient authentication in the MQTT backend (broker) allows an attacker to access and even manipulate the telemetry data of the entire fleet of vehicles using the HopeChart HQT-401 telematics unit.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00191 · Published 2023-06-01 · No fix listed CWE-287