CVE-2023-1083 | Welotec TK515L prior 2.3.0.r5542 MQTT Topic Name access control (VDE-2024-009)

A vulnerability was found in Welotec TK515L, TK515L Set, TK515L-W, TK515L-W Set, TK525L, TK525L Set, TK525L-W, TK525L-W Set, TK525U, TK525U Set, TK525W, TK525W Set, TK535L1 and TK535L1 Set. It has been classified as very critical. This affects an unknown part of the component MQTT Topic Name Handler. The manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2023-1083. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.