CVE-2024-31486

CVE-2024-31486 describes a vulnerability in all versions of OPUPI0 AMQP/MQTT prior to V5.30, where MQTT client passwords are stored without adequate protection on the devices. This allows an attacker with remote shell or physical access to retrieve these credentials, leading to a loss of confidentiality. The vulnerability has a CVSS score of 5.3 (Medium), indicating a network attack vector with high attack complexity, but only requires low privileges to exploit. There is currently no evidence of active exploitation, nor are there public exploit codes available, and community discussion and media coverage remain limited.