漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Certificate validity not properly verified
Vulnerability Description
The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not rejected properly. The use of a client certificate reduces the risk for random devices to take advantage of this flaw.
CVSS Information
N/A
Vulnerability Type
证书过期验证不恰当
Vulnerability Title
PcVue 安全漏洞
Vulnerability Description
PcVue是PcVue公司的一个可靠、安全、强大的运营软件平台,专用于监测和控制建筑和园区管理等市场中的应用。 PcVue存在安全漏洞,该漏洞源于MQTT组件未验证远程设备证书有效期,可能导致恶意设备连接。
CVSS Information
N/A
Vulnerability Type
N/A