Description
The local MQTT broker does not enforce topic-level Access Control Lists (ACLs). This allows any client to subscribe using wildcard characters (# or +) to enumerate hidden network devices or publish rogue control commands.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Acer Connect M6E 5G Portable WiFi Router
Default version status: unaffected
* to ≤ M6E_AI_1.00.000019affected