GCVE - cpe:2.3:a:connectedio:connected_io:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:connectedio:connected_io:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Connectedio (`6973d0fe-2ef8-53d1-a123-57adfa036265`)
Product	Connected Io (`3311af44-a581-5fea-acfb-405346885dcc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-33379`	vulnerable	2026-06-08 06:06:22.365101	Details available Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices to connect to the broker and issue commands to other device, impersonating Connected IO management platform and sending commands to all of Connected IO's devices. Published: 2023-08-04T00:00:00.000Z Updated: 2024-10-17T15:16:20.577Z Open on db.gcve.eu Reference links https://www.connectedio.com/products/routers https://claroty.com/team82/disclosure-dashboard/cve-2023-33379	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33378`	vulnerable	2026-06-08 06:06:22.364693	Details available Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices. Published: 2023-08-04T00:00:00.000Z Updated: 2024-10-17T15:28:54.358Z Open on db.gcve.eu Reference links https://www.connectedio.com/products/routers https://claroty.com/team82/disclosure-dashboard/cve-2023-33378	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33377`	vulnerable	2026-06-08 06:06:22.364241	Details available Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices. Published: 2023-08-04T00:00:00.000Z Updated: 2024-10-17T15:29:31.689Z Open on db.gcve.eu Reference links https://www.connectedio.com/products/routers https://claroty.com/team82/disclosure-dashboard/cve-2023-33377	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33376`	vulnerable	2026-06-08 06:06:22.363931	Details available Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices. Published: 2023-08-04T00:00:00.000Z Updated: 2024-10-17T14:56:35.609Z Open on db.gcve.eu Reference links https://www.connectedio.com/products/routers https://claroty.com/team82/disclosure-dashboard/cve-2023-33376	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33375`	vulnerable	2026-06-08 06:06:22.363465	Details available Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices. Published: 2023-08-04T00:00:00.000Z Updated: 2024-10-17T15:30:03.999Z Open on db.gcve.eu Reference links https://www.connectedio.com/products/routers https://claroty.com/team82/disclosure-dashboard/cve-2023-33375	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33374`	vulnerable	2026-06-08 06:06:22.362995	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33373`	vulnerable	2026-06-08 06:06:22.362515	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33372`	vulnerable	2026-06-08 06:06:22.362006	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.