Exploitation Summary
EIP tracks 2 public exploits for CVE-2022-22833. PoCs published by AkkuS.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated MQTT credentials dump vulnerability in Servisnet Tessa by extracting hardcoded credentials from a publicly accessible JavaScript file and attempting to authenticate with the MQTT service.
Description
An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.
Exploits (2)
This Metasploit module exploits an unauthenticated MQTT credentials dump vulnerability in Servisnet Tessa by extracting hardcoded credentials from a publicly accessible JavaScript file and attempting to authenticate with the MQTT service.
This Metasploit module exploits a privilege escalation vulnerability in Servisnet Tessa by leveraging an API endpoint to retrieve user information, including session IDs, and then creating a new admin user with a hardcoded password.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N