CVE-2024-46874 — Ruijie Reyee OS Improper Handling of Insufficient Permissions or Privileges
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with devi…
Published: 2024-12-06 · CVSS: 9.2 · CVSS 4.0
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with device credentials could issue commands to other devices on behalf of Ruijie's cloud.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7