CISA 2026-09-17

Bransys ELD

Machine-generated analysis · WAYSCloud LLM

Bransys ELD versions prior to Android 11.00.00 and iOS 1.1.54 contain hard-coded MQTT credentials and transmit data in cleartext. These flaws could let an attacker read telemetry data and firmware.

Context

Bransys ELD is an electronic logging device used in U.S. transportation systems. The advisory states that hard-coded MQTT credentials and cleartext transmission of sensitive information could allow unauthorized access to real-time telemetry data and firmware. The hard-coded credentials grant read access to every active device across a subset of carriers connected to the affected broker. Bransys recommends updating the app to version 11.00.00 (Android) or 1.1.54 (iOS) via the app store.

Operator considerations

Check: Verify installed Bransys ELD version is 11.00.00 or newer on Android and 1.1.54 or newer on iOS.
Isolate: Restrict MQTT broker access to authorized devices and consider network segmentation for ELD traffic.
Patch: Apply the vendor-provided update through the app store to the latest version.
Log: Monitor MQTT broker logs for unexpected client connections or data reads.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of these vulnerabilities could allow unauthorized access to telemetry data and firmware.

The following versions of Bransys ELD are affected:

Android

Read the full advisory on CISA →