CVE-2022-22833

This Metasploit module exploits an unauthenticated MQTT credentials dump vulnerability in Servisnet Tessa by extracting hardcoded credentials from a publicly accessible JavaScript file and attempting to authenticate with the MQTT service.

This Metasploit module exploits a privilege escalation vulnerability in Servisnet Tessa by leveraging an API endpoint to retrieve user information, including session IDs, and then creating a new admin user with a hardcoded password.