CVE-2023-6248

The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks the location, video and diagnostic data from each connected device. An attacker who knows the IP address of the server is able to connect and perform the following operations: * Get location data of the vehicle the device is connected to * Send CAN bus messages via the ECU module ( https://syrus.digitalcomtech.com/docs/ecu-1 https://syrus.digitalcomtech.com/docs/ecu-1 ) * Immobilize the vehicle via the safe-immobilizer module ( https://syrus.digitalcomtech.com/docs/system-tools#safe-immobilization https://syrus.digitalcomtech.com/docs/system-tools#safe-immobilization ) * Get live video through the connected video camera * Send audio messages to the driver ( https://syrus.digitalcomtech.com/docs/system-tools#apx-tts https://syrus.digitalcomtech.com/docs/system-tools#apx-tts )

• CWE-94
• CWE-200
• CWE-287
• CWE-319

• https://www.digitalcomtech.com/product/syrus-4g-iot-telematics-gateway/Product
• https://www.digitalcomtech.com/product/syrus-4g-iot-telematics-gateway/Product

Published

Nov 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6242The EventON - WordPress Virtual Event Calendar Plugin plugin…4.3
• CVE-2023-6243The EventON PRO - WordPress Virtual Event Calendar Plugin pl…4.3
• CVE-2023-6244The EventON - WordPress Virtual Event Calendar Plugin plugin…4.3
• CVE-2023-6245The Candid library causes a Denial of Service while parsing…7.5
• CVE-2023-6246A heap-based buffer overflow was found in the __vsyslog_inte…7.8
• CVE-2023-6247The PKCS#7 parser in OpenVPN 3 Core Library versions through…6.5
• CVE-2023-6249Signed to unsigned conversion esp32_ipm_send9.8
• CVE-2023-6250The BestWebSoft's Like & Share WordPress plugin before 2.74 …7.5
• CVE-2023-6251Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2…3.5
• CVE-2023-6252Path traversal vulnerability in Chalemelon Power framework, …7.5
• CVE-2023-6253A saved encryption key in the Uninstaller in Digital Guardia…6
• CVE-2023-6254A Vulnerability in OTRS AgentInterface and ExternalInterface…7.5