The Path to the Cloud is Filled with Holes: Exploiting 4G Edge Routers

Team82 disclosed multiple critical vulnerabilities in ConnectedIO’s ER2000 3G/4G edge routers and cloud platform: hardcoded MQTT credentials and a misconfigured broker allowed passive leakage of device IMEIs and sensitive configuration data (including Wi‑Fi credentials), and permitted publishing to device receive topics; combined with device-side command parsing (notably opcode 1116) this enabled authenticated-less remote code execution on deployed devices. ConnectedIO issued firmware updates to address the findings.