Description
Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT broker and access data or perform actions across tenant boundaries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| am_automatic_machines | am_club | 1.7.194 – < 1.8.198 | 1.8.198 |