Think you have a false positive on this rule?

Sid 1-51017

Message

PROTOCOL-OTHER Losant Arduino MQTT Client buffer overflow attempt

Summary

This event is generated when there is a Losant Arduino MQTT Client buffer overflow attempt.

Impact

Attempted User Privilege Gain

Detailed information

Affected systems

  • Losant Arduino MQTT Client < V2.7

Ease of attack

False positives

False negatives

Corrective action

Contributors

  • Cisco Talos Intelligence Group

Additional References

  • CVE-2018-17614
  • github.com/knolleary/pubsubclient/releases/tag/v2.7